Skip to content
OpenAdvisories

Vendor

switcorp

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File

    The Activity Log for WordPress plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the winter_activity_log_action() function in all versions up to, and including, 1.2.8. This makes it possible for authenticat…

  • Medium 5.3

    Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration

    The Profiler – What Slowing Down Your WP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpsd_plugin_control() function in all versions up to, and including, 1.0.0. This makes it possible for un…