gdragon coreActivity: Activity Logging for WordPress

• CVE-2026-7635 High 8.1 coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field 0.5%
• CVE-2025-3436 Medium 6.5 coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection 0.4%