WordPress Plugin WP Activity Log security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2023-11858 · WordPress · Wp Activity Log

Name of the Vulnerable Software and Affected Versions: WP Activity Log plugin for WordPress versions up to, and including, 4.0.1 Description: The issue is related to authorization bypass due to a missing capability check on the setup page function. This allows unauthenticated attackers to run the...

CVE-2020-36716: Missing Authorization

The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the setuppage function in versions up to, and including, 4.0.1. This makes it possible for unauthenticated attackers to run the setup wizard if it has not been run previously and...

Introducing Malwarebytes Application Block: How to block unauthorized software from executing on Windows endpoints

Malwarebytes is excited to announce Application Block, a new module for Nebula and OneView for MSPs which helps organizations easily thwart unwanted applications from launching on Windows endpoints. For as many applications out there that help you keep business running as usual, there are just as...

PT-2022-25555 · Solwin Infotech · Solwin Infotech User Activity Log Plugin

Name of the Vulnerable Software and Affected Versions: Solwin Infotech User Activity Log Plugin affected versions not specified Description: A vulnerability has been found in the Solwin Infotech User Activity Log Plugin, affecting the HTTP Header Handler component. The manipulation of the...

PT-2022-25585

Name of the Vulnerable Software and Affected Versions WP White Security WP Activity Log Plugin affected versions not specified Description A vulnerability was found in the WP White Security WP Activity Log Plugin, affecting an unknown part of the component HTTP Header Handler. The manipulation of...

PT-2022-25570

Name of the Vulnerable Software and Affected Versions Activity Log Plugin affected versions not specified Description A vulnerability has been found in the Activity Log Plugin, affecting an unknown functionality of the component HTTP Header Handler. The manipulation of the X-Forwarded-For argumen...

WordPress Zoho Activity Log Input Validation Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Zoho Activity Log is vulnerable to an input validation error that originates from unknown...

CVE-2022-3941

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

CVE-2022-3941

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

Design/Logic Flaw

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

WordPress Plugin Zoho Activity Log has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress Zoho Activity Log is vulnerable to an input validation error that originates from unknown...

CVE-2022-3941: Improper Neutralization

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

PT-2022-24963 · WordPress · Activity Log Plugin

Name of the Vulnerable Software and Affected Versions: Activity Log Plugin affected versions not specified Description: A critical issue has been found in the HTTP Header Handler component. The manipulation of the X-Forwarded-For argument leads to improper output neutralization for logs. This iss...

CVE-2022-3941 Activity Log Plugin HTTP Header neutralization for logs

A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-For leads to improper output neutralization for logs. The attack can be initiated remotely...

CVE-2022-3941

The CVE-2022-3941 entry describes a vulnerability in the Activity Log Plugin’s HTTP Header Handler, where manipulating the X-Forwarded-For argument causes improper output neutralization in logs. Affected component: HTTP Header Handler within the WordPress Activity Log Plugin. Impact as stated: re...

CVE-2022-26088

An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...

Server side request forgery (ssrf)

An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...

CVE-2022-26088: Improper Neutralization of Input During Web Page Generation

An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...

CVE-2022-26088

An issue was discovered in BMC Remedy before 22.1. Email-based Incident Forwarding allows remote authenticated users to inject HTML such as an SSRF payload into the Activity Log by placing it in the To: field. This affects rendering that occurs upon a click in the "number of recipients" field...