# CVEs published 2013-09-26

4 CVEs were published on September 26, 2013: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4626](https://cve.now/CVE-2013-4626.md): Cross-site scripting (XSS) vulnerability in the BackWPup plugin before 3.0.13 for WordPress allows remote attackers to inject arbitrary web (no CVSS)
- [CVE-2012-4079](https://cve.now/CVE-2012-4079.md): The XML API service in the Fabric Interconnect component in Cisco Unified Computing System (UCS) allows remote attackers to cause a denial o (no CVSS)
- [CVE-2012-4088](https://cve.now/CVE-2012-4088.md): The FTP server in Cisco Unified Computing System (UCS) has a hardcoded password for an unspecified user account, which makes it easier for r (no CVSS)
- [CVE-2012-4092](https://cve.now/CVE-2012-4092.md): The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity o (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2013-09-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.