CVE-2023-4269: Solwininfotech User Activity Log

Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days.

The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subscriber to perform such action and retrieve PII such as email addresses.

Affected products

• Solwininfotech User Activity Log: before 1.6.6 (fixed in 1.6.6)

Published 2023-09-04. Last modified 2026-06-17.