Skip to content
OpenAdvisories

Product · switcorp

Activity Log for WordPress

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-1671

    Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File

    The Activity Log for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the winter_activity_log_action() function in all versions up to, and including, 1.2.8. This makes it possible for authenticat…

    switcorp Activity Log for WordPress Web / CMS