a
activecampaign
Security Risk Profile
58
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 17 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 31, 2003 to present
17
Total CVEs
9
Critical+High
0
Exploited
6
Unpatched
Threat Assessment
Avg CVSS
6.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
6
Critical/High
Risk Level
58/100
medium
Severity Distribution
Critical
1High
8Medium
8Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
4
2
XSS
3
3
SSRF
1
4
CSRF
1
Most Affected Products
1. ActiveCampaign TrioLive130
2. ActiveCampaign KnowledgeBuilder8
3. ActiveCampaign SupportTrio5
4. ActiveCampaign ActiveCampaign WordPress3
5. ActiveCampaign 1-2-All Broadcast Email3
Recent Vulnerabilities
See more →CVE-2024-32430
CVSS 9.8EPSS 0%critical
WordPress ActiveCampaign plugin <= 8.1.14 - Server Side Request Forgery (SSRF) vulnerability
4/15/2024
CVE-2023-0233
CVSS 5.4medium
ActiveCampaign < 8.1.12 - Contributor+ Stored XSS
5/15/2023🔧 No Patch
CVE-2022-3923
CVSS 4.3medium
ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup
1/9/2023🔧 No Patch
CVE-2021-24133
CVSS 4.3medium
ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings
3/18/2021🔧 No Patch
CVE-2008-5055
CVSS 7.5high
11/13/2008
CVE-2008-5056
CVSS 4.3medium
11/13/2008
CVE-2007-2630
CVSS 6.5medium
5/11/2007
CVE-2006-5919
CVSS 7.5high
11/15/2006🔧 No Patch
CVE-2006-1488
CVSS 5.0medium
3/29/2006🔧 No Patch
CVE-2006-1487
CVSS 4.3medium
3/29/2006🔧 No Patch
Monitor activecampaign in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.