User Activity Log
Approved changes feed: RSS · Atom
cpe:2.3:a:solwininfotech:user_activity_log:*:*:*:*:pro:wordpress:*:*
part: a version: * update: *
| Vendor | Solwininfotech (a06dab3c-02f7-5c03-8acd-dc97ff56b199) |
|---|---|
| Product | User Activity Log (4653f2b8-5a96-59c4-9412-dc321937e70e) |
| Edition | * |
| Language | * |
| Software edition | pro |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-32137 |
vulnerable | 2026-06-08 06:35:32.951718 |
WordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerability
HIGH (8.5)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin User Activity Log Pro.This issue affects User Activity Log Pro: from n/a through 2.3.4.
Published: 2024-04-15T07:19:29.936Z
Updated: 2026-04-28T16:09:34.795Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5167 |
vulnerable | 2026-06-08 06:19:42.747919 |
User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visitors to conduct Stored Cross-Site Scripting attacks.
Published: 2023-10-16T19:39:00.682Z
Updated: 2025-04-23T16:13:31.175Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5133 |
vulnerable | 2026-06-08 06:19:42.532719 |
User Activity Log Pro < 2.3.4 - IP Spoofing
This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value. This may be used to hide the source of malicious traffic.
Published: 2023-10-16T19:39:17.507Z
Updated: 2025-04-23T16:11:40.829Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.