Skip to content
Sign in
5.3 Medium

CVE-2024-0970 This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially…

Description

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.

Affected products and versions

Product Affected versions Fixed in
User Activity Tracking and Log 4.1 earliest → < 4.1.4 4.1.4

Other CVEs of User Activity Tracking and Log

The 2 CVEs of User Activity Tracking and Log →
CVE-2023-4150 The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its… 4.3 Medium
Track this CVE