CVE-2023-4269

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Sep 4, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-426907.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426917.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426927.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426937.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426947.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426957.8In wifi service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executionCVE-2023-426967.8In telecom service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional executCVE-2023-426975.5In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to CVE-2023-426985.5In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to CVE-2023-426995.5In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to CVE-2023-42706.1The Min Max Control WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to aCVE-2023-427005.5In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead
CVE-2023-4269: Medium severity, CVSS 4.3 | Vulnix