Activity Log For Wordpress
Approved changes feed: RSS · Atom
cpe:2.3:a:switcorp:activity_log_for_wordpress:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Switcorp (1b4af403-b2a4-5c2e-93c8-98476318c963) |
|---|---|
| Product | Activity Log For Wordpress (0a0fe8b1-2c98-5296-b8e0-7da0ad366154) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-1671 |
vulnerable | 2026-06-08 07:49:09.332937 |
Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File
MEDIUM (6.5)
The Activity Log for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the winter_activity_log_action() function in all versions up to, and including, 1.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view potentially sensitive information (e.g., the password of a higher level user, such as an administrator) contained in the exposed log files.
Published: 2026-02-12T12:31:50.364Z
Updated: 2026-04-08T16:55:44.269Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.