Activecampaign vulnerabilities

Products

• Knowledgebuilder 5
• Activecampaign 4
• Supporttrio 4
• 1-2-all Broadcast Email 2
• Triolive 2

Newest

• activecampaign WordPress ActiveCampaign Plugin <= 8.1.16 - Cross Site Scripting (XSS) vulnerability CVE-2025-32136 5.9 MediumApril 4, 2025
• activecampaign WordPress ActiveCampaign plugin <= 8.1.14 - Server Side Request Forgery (SSRF) vulnerability CVE-2024-32430 4.4 MediumApril 15, 2024
• activecampaign ActiveCampaign < 8.1.12 - Contributor+ Stored XSS CVE-2023-0233 5.4 MediumMay 15, 2023
• activecampaign for woocommerce, unknown activecampaign for woocommerce +1 more ActiveCampaign for WooCommerce < 1.9.8 - Subscriber+ Error Log Cleanup CVE-2022-3923 4.3 MediumJanuary 9, 2023
• activecampaign ActiveCampaign < 8.0.2 - Cross-Site Request Forgery in Settings CVE-2021-24133 4.3 MediumMarch 18, 2021
• activecampaign triolive Cross-site scripting (XSS) vulnerability in department_offline_context.php in ActiveCampaign... CVE-2008-5056 4.3 MediumNovember 13, 2008
• activecampaign triolive SQL injection vulnerability in department_offline_context.php in ActiveCampaign TrioLive before 1... CVE-2008-5055 7.5 HighNovember 13, 2008
• activecampaign 1-2-all broadcast email Incomplete blacklist vulnerability in filemanager/browser/default/connectors/php/config.php in... CVE-2007-2630 6.5 MediumMay 11, 2007
• activecampaign knowledgebuilder PHP remote file inclusion vulnerability in admin/e_data/visEdit_control.class.php in... CVE-2006-5919 Public exploit 7.5 HighNovember 15, 2006
• activecampaign supporttrio ActiveCampaign SupportTrio 2.5 allows remote attackers to obtain the full path of the server via... CVE-2006-1488 5.0 MediumMarch 29, 2006
• activecampaign supporttrio Cross-site scripting (XSS) vulnerability in ActiveCampaign SupportTrio 2.50.2 allows remote... CVE-2006-1487 Public exploit 4.3 MediumMarch 29, 2006
• activecampaign supporttrio, 1-2-all, general +3 more +5 more PHP remote file inclusion vulnerability in index.php in one or more ActiveCampaign products,... CVE-2006-0970 7.5 HighMarch 3, 2006
• activecampaign supporttrio SQL injection vulnerability in index.php in ActiveCampaign SupportTrio 1.4 allows remote... CVE-2005-4634 7.5 HighDecember 31, 2005
• activecampaign knowledgebuilder index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a... CVE-2005-3829 7.8 HighNovember 26, 2005
• activecampaign knowledgebuilder SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier... CVE-2005-3828 7.5 HighNovember 26, 2005
• activecampaign 1-2-all broadcast email SQL injection vulnerability in admin/index.php in ActiveCampaign 1-2-All Broadcast Email allows... CVE-2005-3679 Public exploit 7.5 HighNovember 18, 2005
• activecampaign knowledgebuilder PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as... CVE-2003-1131 Public exploit 7.5 HighDecember 31, 2003