| CVE-2025-13471 |
The User Activity Log WordPress plugin through 2.2 does not properly handle failed login attempts in some cases,…
|
5.3
Moyenne
|
28 janv. 2026 |
| CVE-2023-4279 |
This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers,…
|
7.5
Élevée
|
4 sept. 2023 |
| CVE-2023-4269 |
The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs,…
|
4.3
Moyenne
|
4 sept. 2023 |
| CVE-2023-3435 |
The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before…
|
Non notée
|
14 août 2023 |
| CVE-2023-2761 |
The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter…
|
Non notée
|
24 juil. 2023 |