User Activity Tracking And Log
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:user_activity_tracking_and_log:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | User Activity Tracking And Log (493b2fd7-c316-50bd-8552-87b8f223b6bc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0970 |
vulnerable | 2026-06-08 06:22:03.244921 |
User Activity Tracking and Log < 4.1.4 - IP Spoofing
This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.
Published: 2025-05-15T20:09:32.658Z
Updated: 2025-11-13T21:07:50.088Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-4150 |
vulnerable | 2026-06-08 06:16:11.636858 |
User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF
The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks
Published: 2023-08-30T14:22:04.733Z
Updated: 2025-04-23T16:18:40.446Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.