CVE-2023-5167

概要

参考情報

• wpscan.com/vulnerability/78ea6fe0-5fac-4923-949c-023c85fe2437 · Exploit

user activity log のその他の脆弱性

• CVE-2023-37966緊急 9.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log user…
• CVE-2023-5133高 7.5This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attac…
• CVE-2023-4279高 7.5This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker …
• CVE-2023-4269中 4.3The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated …
• CVE-2023-3435緊急 9.8The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL state…