Lucene search
PRIOn knowledge basePRION:CVE-2023-4269HistorySep 04, 2023 - 12:15 p.m.
Code injection
2023-09-0412:15:00
PRIOn knowledge base
www.prio-n.com
7
injection
wordpress
authorization
pii
email addresses
vulnerability
The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.
| CPE | Name | Operator | Version |
|---|---|---|---|
| user_activity_log | lt | 1.6.6 |
Related
cve
cve
CVE-2023-4269
2023-09-04 12:15:10
wpvulndb
wpvulndb
User Activity Log < 1.6.6 - Subscriber+ Log Export
2023-08-09 00:00:00
cvelist
cvelist
CVE-2023-4269 User Activity Log < 1.6.6 - Subscriber+ Log Export
2023-09-04 11:26:56
nvd
nvd
CVE-2023-4269
2023-09-04 12:15:10
wpexploit
wpexploit
User Activity Log < 1.6.6 - Subscriber+ Log Export
2023-08-09 00:00:00
wordfence
wordfence