plugin
4 known security issues reported for the User Activity Tracking And Log WordPress plugin. Most recent disclosed Jan 29, 2024.
Running User Activity Tracking And Log on your site? Check whether your installed version is affected.
Scan your site freeThe User Activity Tracking and Log plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 4.1.3 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for attackers to perform actions that are...
[en] The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license via CSRF attacks
The User Activity Tracking and Log plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.8. This is due to missing or incorrect nonce validation when handling licenses. This makes it possible for unauthenticated attackers to change the plugin license via a forged request...
** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free