CVE-2023-3435: Undefined Security Weakness

The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks...

PT-2023-24833

Name of the Vulnerable Software and Affected Versions User Activity Log WordPress plugin versions prior to 1.6.5 Description The issue arises from the plugin's failure to correctly sanitise and escape several parameters before using them in a SQL statement as part of its exportation feature. This...