Plugin icon

Activity Log for WordPress

winterlock

Vulnerabilities:

5

Last Updated:

February 11, 2026

Active Installs:

70

Published
Title
Fixed in
CVSS
Published
2026-03-17
Title
Activity Log for WordPress < 1.2.8 - Missing Authorization
Fixed in
Fixed in 1.2.8
CVSS
4.3 (medium)
Published
2026-02-11
Title
Activity Log for WordPress < 1.2.9 - Missing Authorization to Sensitive Information Exposure via Log File
Fixed in
Fixed in 1.2.9
CVSS
6.5 (medium)
Published
2025-02-04
Title
Cross-Site Request Forgery < 1.2.5 - Cross-Site Request Forgery
Fixed in
Fixed in 1.2.5
CVSS
4.3 (medium)
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Fixed in
Fixed in 1.0.23
CVSS
4.3 (medium)
Published
2021-11-15
Title
WP System Log < 1.0.21 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.0.21
CVSS
9.8 (critical)