WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
user-activity-log
Published
2023-08-09
Title
User Activity Log < 1.6.6 - Subscriber+ Log Export
Slug
user-activity-log
Published
2023-08-14
Title
User Activity Log < 1.6.7 - IP Spoofing
Slug
user-activity-log
Published
2023-07-12
Title
User Activity Log < 1.6.3 - Admin+ SQLi
Slug
user-activity-log
Published
2024-04-07
Title
User Activity Log < 2.0 - Admin+ SQL Injection
Slug
user-activity-log
Published
2026-01-06
Title
User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update
Slug
user-activity-log
Published
2026-01-06
Title
User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login
Slug
user-activity-log-pro
Published
2023-09-25
Title
User Activity Log Pro < 2.3.4 - IP Spoofing
Slug
user-activity-log-pro
Published
2023-09-29
Title
User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
Slug
user-activity-log-pro
Published
2024-04-12
Title
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
Slug
user-activity-log-pro
Published
2024-07-09
Title
User Activity Log Pro <= 2.3.4 - Missing Authorization
Slug
user-activity-tracking-and-log
Published
2023-08-07
Title
User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF
Slug
user-activity-tracking-and-log
Published
2024-01-29
Title
User Activity Tracking and Log < 4.1.4 - IP Spoofing
Slug
user-avatar
Published
2014-08-01
Title
User Avatar 1.3.7 - shell upload
Slug
user-avatar
Published
2023-10-25
Title
User Avatar < 1.4.12 - Reflected XSS
Slug
user-avatar-reloaded
Published
2023-09-25
Title
User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
Slug
user-avatar-reloaded
Published
2025-09-28
Title
User Avatar - Reloaded <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
user-control
Published
2018-01-28
Title
User Control - Unauthenticated SQL Injection
Slug
user-counter
Published
2026-01-23
Title
Alex User Counter <= 6.0 - Cross-Site Request Forgery to Settings Update
Slug
user-domain-whitelist
Published
2013-10-09
Title
User Domain Whitelist <= 1.4 - Stored Cross-Site Scripting (XSS)
Slug
user-domain-whitelist
Published
2014-08-01
Title
User Domain Whitelist 1.4 - user-domain-whitelist.php Domain Whitelisting Manipulation CSRF
Slug
user-drop-down-roles-in-registration
Published
2024-10-14
Title
Adding drop down roles in registration <= 1.1 - Unauthenticated Privilege Escalation
Slug
user-export-with-their-meta-data
Published
2021-06-21
Title
Export Users With Meta < 0.6.5 - Admin+ SQLi
Slug
user-export-with-their-meta-data
Published
2022-11-17
Title
Export Users With Meta <= 0.6.10 - Subscriber+ CSV Injection
Slug
user-files
Published
2025-01-16
Title
user files <= 2.4.2 - Unauthenticated Arbitrary File Upload
Slug
user-importer-and-generator
Published
2025-12-04
Title
User Generator and Importer <= 1.2.2 - Cross-Site Request Forgery to Privilege Escalation via Arbitrary Administrator Account Creation