User Activity Log (Unknown) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-01-28. Vendor: Unknown.

CVEs of User Activity Log

• CVE-2025-13471 - CVSS 5.3 (medium), 2026-01-28: The User Activity Log WordPress plugin through 2.2 does not properly handle failed login attempts in some cases, allowing unauthenticated users to set…
• CVE-2023-4279 - CVSS 7.5 (high), 2023-09-04: This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its…
• CVE-2023-4269 - CVSS 4.3 (medium), 2023-09-04: The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as…
• CVE-2023-3435 - CVSS 9.8 (critical), 2023-08-14: The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of…
• CVE-2023-2761 - CVSS 7.2 (high), 2023-07-24: The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter before using it in a SQL statement in some…