Vendors / Activity Log Project Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 0
Exploited now Activity Log Project records in CISA KEV No Activity Log Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 63
This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00719 · Published 2023-09-25 · Fixed in 2.8.8
Priority MEDIUM 44
CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01047 · Published 2022-11-08 · No fix listed CWE-1236
Priority LOW 25
A vulnerability has been found in Activity Log Plugin and classified as critical.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00764 · Published 2022-11-11 · No fix listed CWE-707
Open these records in search → All records by CVSS severity
1 0 2 0 0
