CVE-2023-4269

PoC —

CVSS 3.1

4.3 medium

EPSS

<1%p43

Published

Sep 4, 2023 (Sep 4, 2023)

Modified

Jun 17, 2026

Description

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.

Vendors: solwininfotech
Products: user activity log
Ecosystems: WordPress
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.