Advisories · Technology
wpwhitesecurity WP Activity Log Premium.
Every CVE that names wpwhitesecurity WP Activity Log Premium among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.8 High
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
- wpwhitesecurity WP Activity Log Premium
- SQL injection
- CVSS 4.3 Medium
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
- melapress WP Activity Log
- wpwhitesecurity WP Activity Log Premium
- Broken access control
- CVSS 4.3 Medium
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
- melapress WP Activity Log
- wpwhitesecurity WP Activity Log Premium
- Cross-site request forgery (CSRF)
- CVSS 4.3 Medium
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
- wpwhitesecurity WP Activity Log Premium
- Broken access control
- CVSS 4.3 Medium
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
- wpwhitesecurity WP Activity Log Premium
- Cross-site request forgery (CSRF)