User Activity Log Pro
Approved changes feed: RSS · Atom
cpe:2.3:a:unknown:user-activity-log-pro:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Unknown (668ca391-a6cc-5e33-879b-83885214de33) |
|---|---|
| Product | User Activity Log Pro (ecf7443b-335b-5792-ab78-fac42963a9f7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-5167 |
vulnerable | 2026-06-08 06:19:42.747732 |
User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks.
Published: 2023-10-16T19:39:00.682Z
Updated: 2025-04-23T16:13:31.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5133 |
vulnerable | 2026-06-08 06:19:42.531399 |
User Activity Log Pro < 2.3.4 - IP Spoofing
This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.
Published: 2023-10-16T19:39:17.507Z
Updated: 2025-04-23T16:11:40.829Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.