CVSS 3.1 Score 5.3 of 10 (medium)


Published Sep 25, 2023
Updated: Nov 7, 2023
CWE ID 290


CVE-2023-4281 is a vulnerability found in the Activity Log WordPress plugin before version 2.8.8. This vulnerability allows an attacker to manipulate the value of client IP addresses retrieved from potentially untrusted headers, enabling them to hide the source of malicious traffic. The affected products include avMJy2, avMJy3, avMJy0, avMJy1, avMJyy, avMJyz, and several others. To remediate this vulnerability, users should update their plugin to version 2.8.8 or later. The potential danger it poses to organizations is that it could allow attackers to carry out malicious activities while masking their identity and origin of the traffic.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.


Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-4281 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options