| CVE-2025-13471 |
The User Activity Log WordPress plugin through 2.2 does not properly handle failed login attempts in some cases,…
|
5.3
Medium
|
Jan 28, 2026 |
| CVE-2023-4279 |
This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers,…
|
7.5
High
|
Sep 4, 2023 |
| CVE-2023-4269 |
The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs,…
|
4.3
Medium
|
Sep 4, 2023 |
| CVE-2023-3435 |
The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before…
|
Not rated
|
Aug 14, 2023 |
| CVE-2023-2761 |
The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter…
|
Not rated
|
Jul 24, 2023 |