Vulnerabilities

TI-2026-28555 CVE-2026-39581 · GHSA-8r7w-wppc-53wm

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.4 - SQL Injection vulnerability

LOW 37

Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00279 Published 2026-06-16 No fix listed CWE-89

TI-2026-20172 CVE-2026-24987 · GHSA-8gw9-9659-grwg

WordPress WP System Log plugin <= 1.2.7 - Broken Access Control vulnerability

LOW 29

Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP System Log: from n/a through <= 1.2.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00377 Published 2026-03-25 No fix listed CWE-862

TI-2026-24890 CVE-2026-32362 · GHSA-42wv-w6r3-qgm2

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00237 Published 2026-03-13 No fix listed CWE-862

TI-2025-30665 CVE-2025-48339 · GHSA-cm58-gfjf-fc84

WordPress Profiler - What Slowing Down Your WP <= 1.0.0 - Broken Access Control Vulnerability

LOW 34

Missing Authorization vulnerability in activity-log.com Profiler - What Slowing Down Your WP allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00238 Published 2025-07-16 No fix listed CWE-862

TI-2025-18435 CVE-2025-24718 · GHSA-fmxm-pfh7-h2hg

Cross-site scripting in activity-log.com WP Sessions Time Monitoring Full Automatic

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Reflected XSS.This issue affects WP Se…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00266 Published 2025-01-31 No fix listed CWE-79

TI-2024-33167 CVE-2024-49681 · GHSA-235q-rjqx-w2hm

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.0.9 - SQL Injection vulnerability

HIGH 79

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows SQL Injection.This issue affects WP Se…

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.01091 Published 2024-10-24 No fix listed CWE-89