CVE-2023-37966

Mô tả

Tham khảo

• patchstack.com/database/vulnerability/user-activity-log/wordpress-user-activity-log-plugin-1-6-2-sql-injection-vulnerability · Third Party Advisory

Lỗ hổng khác của user activity log

• CVE-2023-5167TRUNG BÌNH 5.4The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, w…
• CVE-2023-5133CAO 7.5This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attac…
• CVE-2023-4279CAO 7.5This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker …
• CVE-2023-4269TRUNG BÌNH 4.3The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated …
• CVE-2023-3435NGHIÊM TRỌNG 9.8The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL state…