CVE-2023-4269 | BDVDB-2026-210990 Detail

Description#

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-09-04Record published in the CVE List.
2. Version 22025-04-23Most recent update recorded in the CVE List.