Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
2 selected

2 records

Vendor: Moove Agency Component: User Activity Tracking And Log Clear all filters
TI-2024-00894 CVE-2024-0970 · GHSA-v8j5-hjg7-w5w5

User Activity Tracking and Log < 4.1.4 - IP Spoofing

Priority MEDIUM 63

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00376 Published 2025-05-15 Fixed in 4.1.4
TI-2023-03839 CVE-2023-4150 · GHSA-4f42-3j25-qr4f

User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF

Priority MEDIUM 53

The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00252 Published 2023-08-30 Fixed in 4.0.9