VULNERABILITY INTELLIGENCE

CVE-2023-4269

CVSS score4.3 MEDIUM
EPSS probability0.52%
CISA KEVNot currently listed
Published2023-09-04
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.

Weakness classification

  • nvd@nist.gov: CWE-863

Primary references