CVE-2022-3923

MEDIUM · CVSS 4.3 EPSS 0.48%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-01-09 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-3923

Severity

MEDIUM

CVSS

4.3

EPSS

0.48%

WordPress

Original NVD Description

The ActiveCampaign for WooCommerce WordPress plugin before 1.9.8 does not have authorisation check when cleaning up its error logs via an AJAX action, which could allow any authenticated users, such as subscriber to call it and remove error logs.