Vulnerabilities

TI-2026-01928 CVE-2026-2283 · GHSA-p789-q8m9-8xjm

User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter

LOW 23

The User Login History plugin for WordPress is vulnerable to SQL Injection via the 'blog_id' parameter in all versions up to, and including, 2.1.7.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00483 Published 2026-08-16 No fix listed CWE-89

TI-2025-30173 CVE-2025-47676 · GHSA-x22f-67h5-f46c

WordPress User Login History plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faiyaz Alam User Login History user-login-history allows Stored XSS.This issue affects User Login History: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2025-05-07 No fix listed CWE-79

Vulnerabilities

Filters

User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter

WordPress User Login History plugin <= 2.1.6 - Cross Site Scripting (XSS) Vulnerability