CVE-2023-4269

4.3 mediumEPSS 0.5%

Medium (4.3) in solwininfotech user activity log. EPSS 0.5% chance of exploitation in the next 30 days.

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-863
Published: 2023-09-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

solwininfotech:user_activity_log

References

https://wpscan.com/vulnerability/db3e4336-117c-47f2-9b43-2ca115525297
https://wpscan.com/vulnerability/db3e4336-117c-47f2-9b43-2ca115525297

Check your stack JSON