Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: wpwhitesecurity Component: Wp Activity Log Clear all filters
TI-2023-02120 CVE-2023-2261 · GHSA-6j8v-vqm5-qg95

WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration

Priority LOW 21

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_ajax_call function in versions up to, and including, 4.5.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00552 Published 2023-06-09 No fix listed CWE-862
TI-2023-02142 CVE-2023-2284 · GHSA-qgf8-fg36-g63x

WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db

Priority LOW 20

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_switch_db function in versions up to, and including, 4.5.0.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00386 Published 2023-06-09 No fix listed CWE-862
TI-2020-18887 CVE-2020-36716 · GHSA-p8fg-fxjr-7v2x

WP Activity Log <= 4.0.1 - Missing Authorization

Priority MEDIUM 40

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the setup_page function in versions up to, and including, 4.0.1.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00825 Published 2023-06-07 Fixed in 4.0.2 CWE-862