| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2023-4281 | Activity Log < 2.8.8 - IP Spoofing | Unknown | Activity Log | 中危 | - | 2023-09-25 15:56:53 | Deep Dive |
| CVE-2023-4279 | User Activity Log < 1.6.7 - IP Spoofing | Unknown | User Activity Log | 高危 | - | 2023-09-04 11:27:04 | Deep Dive |
| CVE-2023-4269 | User Activity Log < 1.6.6 - Subscriber+ Log Export | Unknown | User Activity Log | 中危 | - | 2023-09-04 11:26:56 | Deep Dive |
| CVE-2023-4150 | User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF | Unknown | User Activity Tracking and Log | 中危 | - | 2023-08-30 14:22:05 | Deep Dive |
| CVE-2023-3435 | User Activity Log < 1.6.5 - Unauthenticated SQLi | Unknown | User Activity Log | 超危 | - | 2023-08-14 19:10:19 | Deep Dive |
| CVE-2023-2761 | User Activity Log < 1.6.3 - Admin+ SQL Injection | Unknown | User Activity Log | 高危 | - | 2023-07-24 10:20:26 | Deep Dive |
| CVE-2023-2261 | WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration | melapress | WP Activity Log | Medium | 4.3 | 2023-06-09 12:32:01 | Deep Dive |
| CVE-2023-2286 | WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup | melapress | WP Activity Log | Medium | 4.3 | 2023-06-09 12:32:01 | Deep Dive |
| CVE-2023-2285 | WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db | wpwhitesecurity | WP Activity Log Premium | Medium | 4.3 | 2023-06-09 12:32:00 | Deep Dive |
| CVE-2023-2284 | WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db | wpwhitesecurity | WP Activity Log Premium | Medium | 4.3 | 2023-06-09 12:32:00 | Deep Dive |
| CVE-2020-36716 | WP Activity Log <= 4.0.1 - Missing Authorization | melapress | WP Activity Log | High | 7.3 | 2023-06-07 01:51:33 | Deep Dive |
| CVE-2022-45074 | WordPress Activity Reactions For Buddypress Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF) | Paramveer Singh for Arete IT Private Limited | Activity Reactions For Buddypress | Medium | 4.3 | 2023-04-23 11:08:00 | Deep Dive |
| CVE-2022-4550 | User Activity <= 1.0.1 - IP Spoofing | Unknown | User Activity | 高危 | - | 2023-02-27 15:24:37 | Deep Dive |
| CVE-2021-32692 | Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt | ActivityWatch | Activity Watch | Critical | 9.6 | 2022-12-23 00:00:00 | Deep Dive |
| CVE-2022-3941 | Activity Log Plugin HTTP Header neutralization for logs | unspecified | Activity Log Plugin | Medium | 5.3 | 2022-11-11 00:00:00 | Deep Dive |
| CVE-2022-27858 | WordPress Activity Log plugin <= 2.8.3 - CSV Injection vulnerability | Activity Log Team | Activity Log (WordPress plugin) | High | 7.4 | 2022-11-08 18:29:27 | Deep Dive |
| CVE-2020-4173 | IBM Security Guardium Insights 安全漏洞 | IBM | InfoSphere Guardium Activity Monitor | 中危 | - | 2020-07-09 19:05:20 | Deep Dive |
| CVE-2012-2079 | Activity for Drupal 跨站请求伪造漏洞 | Activity | Activity | 高危 | - | 2019-11-21 23:02:39 | Deep Dive |
| CVE-2012-2078 | Activity for Drupal 跨站脚本漏洞 | Activity | Activity | 中危 | - | 2019-11-21 22:58:01 | Deep Dive |
| CVE-2017-9513 | Atlassian Activity Streams 访问控制错误漏洞 | Atlassian | Activity Streams | 中危 | - | 2018-01-29 19:00:00 | Deep Dive |