Vulnerabilities

Filters

Reset all

1 selected

3 records

Sort

Vendor: Activity Log Project Clear all filters

TI-2023-03961 CVE-2023-4281 · GHSA-4g74-7gvh-m4wg

Activity Log < 2.8.8 - IP Spoofing

MEDIUM 63

This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00719 Published 2023-09-25 Fixed in 2.8.8

TI-2022-03613 CVE-2022-3941 · GHSA-w4fw-r8m4-v5qv

Activity Log Plugin HTTP Header neutralization for logs

LOW 25

A vulnerability has been found in Activity Log Plugin and classified as critical.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00764 Published 2022-11-11 No fix listed CWE-707

TI-2022-10740 CVE-2022-27858 · GHSA-wc29-x275-pgcq

WordPress Activity Log plugin <= 2.8.3 - CSV Injection vulnerability

MEDIUM 44

CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01047 Published 2022-11-08 No fix listed CWE-1236