Skip to content
OpenAdvisories

Product · Solwin Infotech

User Activity Log

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-11877

    User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login

    The User Activity Log plugin is vulnerable to a limited options update in versions up to, and including, 2.2. The failed-login handler 'ual_shook_wp_login_failed' lacks a capability check and writes failed usernames directly into update_option() calls. This m…

    Solwin Infotech User Activity Log
  • High 7.6
    CVE-2024-31356

    WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log.This issue affects User Activity Log: from n/a through 1.8.

    Solwin Infotech User Activity Log
  • High 7.6
    CVE-2023-37966

    WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin Infotech User Activity Log user-activity-log allows SQL Injection.This issue affects User Activity Log: from n/a through 1.6.2.

    Solwin Infotech User Activity Log