Coreactivity
Approved changes feed: RSS · Atom
cpe:2.3:a:dev4press:coreactivity:*:*:*:*:*:wordpress:*:*
part: a version: * update: *
| Vendor | Dev4Press (44b459dc-1fb5-5302-b250-6481c687876b) |
|---|---|
| Product | Coreactivity (8b4b9d75-5a3c-5e9c-af18-7aa41ddc91b2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-0868 |
vulnerable | 2026-06-08 06:22:03.028773 |
coreActivity < 2.1 - Unauthenticated IP Spoofing
The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing users to spoof them by providing an arbitrary value
Published: 2024-04-17T05:00:02.186Z
Updated: 2024-08-09T20:03:49.776Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-0852 |
vulnerable | 2026-06-08 06:22:02.987963 |
coreActivity < 1.8.1 - Unauthenticated Stored XSS
The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated users to perform Stored XSS attack against high privilege users such as admin
Published: 2025-05-15T20:09:31.811Z
Updated: 2025-11-13T21:11:05.938Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.