Read the docs

ActiveCampaign

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

ActiveCampaign records in CISA KEV

No ActiveCampaign vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Knowledgebuilder 5 records LOW Supporttrio 4 records LOW Activecampaign 3 records MEDIUM 1-2-all Broadcast Email 2 records LOW Triolive 2 records LOW 1-2-all 1 record LOW Activecampaign For Woocommerce 1 record MEDIUM General 1 record LOW

Records

1 record in Activecampaign For Woocommerce · all components

TI-2022-03598 CVE-2022-3923 · GHSA-v3v7-prcm-h632

ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup

Priority MEDIUM 53

The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its error logs via an AJAX action, which could allow any authenticated users, such as subscriber to call…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00488 Published 2023-01-09 Fixed in 1.9.8 CWE-862
Open these records in search →