Read the docs

ActiveCampaign

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ActiveCampaign records in CISA KEV

No ActiveCampaign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Knowledgebuilder 5 records LOW Supporttrio 4 records LOW Activecampaign 3 records MEDIUM 1-2-all Broadcast Email 2 records LOW Triolive 2 records LOW 1-2-all 1 record LOW Activecampaign For Woocommerce 1 record MEDIUM General 1 record LOW

Records

3 records in Activecampaign · all components

TI-2023-00223 CVE-2023-0233 · GHSA-rwf7-w5qg-cvrg

ActiveCampaign < 8.1.12 - Contributor+ Stored XSS

Priority MEDIUM 58

The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor r…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00462 Published 2023-05-15 Fixed in 8.1.12
TI-2021-06425 CVE-2021-24133 · GHSA-6wf6-qg7h-hjm4

ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings

Priority LOW 21

Lack of CSRF checks in the ActiveCampaign WordPress plugin, versions before 8.0.2, on its Settings form, which could allow attacker to make a logged-in administrator change API Credentials to attacker's account.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00474 Published 2021-03-18 Fixed in 8.0.2 CWE-352
Open these records in search →