Read the docs

wpwhitesecurity

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

wpwhitesecurity records in CISA KEV

No wpwhitesecurity vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Activity Log 5 records MEDIUM Wp 2fa 3 records LOW Captcha 4wp 1 record LOW Website File Changes Monitor 1 record MEDIUM

Records

5 records in Wp Activity Log · all components

TI-2020-18887 CVE-2020-36716 · GHSA-p8fg-fxjr-7v2x

WP Activity Log <= 4.0.1 - Missing Authorization

Priority MEDIUM 40

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the setup_page function in versions up to, and including, 4.0.1.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00825 Published 2023-06-07 Fixed in 4.0.2 CWE-862
TI-2023-02120 CVE-2023-2261 · GHSA-6j8v-vqm5-qg95

WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration

Priority LOW 21

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_ajax_call function in versions up to, and including, 4.5.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00552 Published 2023-06-09 No fix listed CWE-862
TI-2023-02142 CVE-2023-2284 · GHSA-qgf8-fg36-g63x

WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db

Priority LOW 20

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_switch_db function in versions up to, and including, 4.5.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00386 Published 2023-06-09 No fix listed CWE-862
Open these records in search →