587 matches found
User Activity Log < 1.4.7 - Reflected Cross Site Scripting via Query String
The plugin does not escape the $SERVER'QUERYSTRING' before outputting it back in attributes, which could lead to Reflected Cross-Site Scripting in web browsers which do not encode URL characters. With a web browser which does not encode characters or use burp suite and decode the URL via the...
Activity Log < 2.7.0 - Authenticated SQL Injection
The plugin was vulnerable to SQL Injection in the order column of the past events table. time curl 'http://www.example.com/wp-admin/admin.php?page=activitylogpage&orderby=histtime%20AND%20SLEEP%280%29' -H 'Cookie: ...'...
WordPress Activity Log plugin <= 2.6.1 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability discovered by Synacktiv in WordPress Activity Log plugin versions = 2.6.1. Solution Update the WordPress Activity Log plugin to the latest available version at least 2.7.0...
WordPress WP Activity Log plugin <= 4.1.4 - SQL Injection (SQLi) in External Database Module vulnerability
SQL Injection SQLi in External Database Module vulnerability found by WP deeply in WordPress WP Activity Log plugin versions = 4.1.4 . Solution Update the WordPress WP Activity Log plugin to the latest available version at least 4.1.5...
WordPress aryo-activity-log plugin cross-site scripting vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. aryo-activity-log is a weblog plugin used in it. A cross-site scripting vulnerability exists in the WordPress aryo-activity-log...
WordPress aryo-activity-log plugin cross-site scripting vulnerability (CNVD-2019-32409)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. aryo-activity-log is a weblog plugin used in it. A cross-site scripting vulnerability exists in the WordPress aryo-activity-log...
CVE-2016-10890
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...
CVE-2016-10890
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...
CVE-2016-10891
The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...
Cross site scripting
The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...
Cross site scripting
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...
CVE-2016-10890
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...
CVE-2016-10890
The aryo-activity-log plugin before 2.3.2 for WordPress has XSS...
CVE-2016-10890
The CVE-2016-10890 entry concerns the WordPress plugin aryo-activity-log, vulnerable before version 2.3.2 to a cross-site scripting (XSS) flaw. Multiple sources (Red Hat, CNVD, OSV, CVE lists, WPVulnDB) consistently describe an XSS condition affecting the plugin for WordPress; exploitation detail...
CVE-2016-10891
The vulnerability CVE-2016-10891 affects the WordPress plugin aryo-activity-log, specifically versions prior to 2.3.3. The issue is a cross-site scripting (XSS) flaw in that plugin. Impact is limited to client-side script execution on sites using affected plugin versions. Remediation is to upgrad...
CVE-2016-10891
The aryo-activity-log plugin before 2.3.3 for WordPress has XSS...
PT-2019-7686 · WordPress · Aryo-Activity-Log
Name of the Vulnerable Software and Affected Versions: aryo-activity-log plugin versions prior to 2.3.2 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website...
PT-2019-7687 · WordPress · Aryo-Activity-Log
Name of the Vulnerable Software and Affected Versions: aryo-activity-log plugin versions prior to 2.3.3 for WordPress Description: The issue is related to a Cross-Site Scripting XSS problem. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website...
