CVE-2023-2284

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxswitchdb function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers with subscriber-level or higher to make...

CVE-2023-2284

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxswitchdb function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers with subscriber-level or higher to make...

CVE-2023-2284

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxswitchdb function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers with subscriber-level or higher to make...

Cross site request forgery (csrf)

The WP Activity Log Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0. This is due to missing or incorrect nonce validation on the ajaxswitchdb function. This makes it possible for unauthenticated attackers to make changes to the...

PT-2023-18725

Name of the Vulnerable Software and Affected Versions WP Activity Log Premium plugin for WordPress versions up to, and including, 4.5.0 Description The issue is due to missing or incorrect nonce validation on the ajax switch db function, making it possible for unauthenticated attackers to make...

PT-2023-18719

Name of the Vulnerable Software and Affected Versions WP Activity Log Premium plugin for WordPress versions up to, and including, 4.5.0 Description The issue allows unauthorized modification of data due to a missing capability check on the ajax switch db function. This makes it possible for...