Solwininfotech User Activity Log
7 CVEs affecting Solwininfotech User Activity Log. Latest disclosed: 2023-10-31. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-3435 | Critical | 9.8 | 2023-08-14 | The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its… |
CVE-2023-37966 | High | 7.6 | 2023-10-31 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log user-activity-log allow… |
CVE-2023-5133 | High | 7.5 | 2023-10-16 | This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate i… |
CVE-2023-4279 | High | 7.5 | 2023-09-04 | This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its v… |
CVE-2023-2761 | High | 7.2 | 2023-07-24 | The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter before using it in a SQL statement in some… |
CVE-2023-5167 | Medium | 5.4 | 2023-10-16 | The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visi… |
CVE-2023-4269 | Medium | 4.3 | 2023-09-04 | The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subs… |