Activecampaign

Activecampaign For Woocommerce

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.3

CVE-2022-3923

Exploit
  • EPSS 0.1%
  • Published 09.01.2023 23:15:26
  • Last modified 09.04.2025 19:15:44

The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its error logs via an AJAX action, which could allow any authenticated users, such as subscriber to call it and remove error logs.