CVE-2023-37966

概要

参考情報

• patchstack.com/database/vulnerability/user-activity-log/wordpress-user-activity-log-plugin-1-6-2-sql-injection-vulnerability · Third Party Advisory

user activity log のその他の脆弱性

• CVE-2023-5167中 5.4The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, w…
• CVE-2023-5133高 7.5This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attac…
• CVE-2023-4279高 7.5This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker …
• CVE-2023-4269中 4.3The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated …
• CVE-2023-3435緊急 9.8The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL state…