This host is installed with Wordpress MailUp Plugin and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to execute arbitary HTML or web script via unspecified vectors in a user's browser session in context of an affected site and disclose sensitive information. Impact Level: Application

Upgrade Wordpress MailUp Plugin 1.3.2 or later, For updates refer to http://wordpress.org/extend/plugins/wp-mailup

Not properly restrict access to unspecified Ajax functions in ajax.functions.php

Wordpress MailUp Plugin version 1.3.1 and prior

• http://osvdb.org/91274
• http://secunia.com/advisories/51917
• http://wordpress.org/extend/plugins/wp-mailup/changelog

---

Updated on 2017-03-28