wpwhitesecurity

Products

ProductCVEsExploitedLatest
WP Activity Log Premium5–Apr 9, 2024

Exploited and recent CVEs

  • CVE-2024-2018 High 8.8 WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection 0.9%
  • CVE-2023-2261 Medium 4.3 WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration 0.6%
  • CVE-2023-2286 Medium 4.3 WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup 0.3%
  • CVE-2023-2284 Medium 4.3 WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db 0.4%
  • CVE-2023-2285 Medium 4.3 WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db 0.2%