CVE-2025-3436

CVE-2025-3436 affects the WordPress plugin “coreActivity: Activity Logging for WordPress.” The vulnerability is an SQL injection in the query built from user-supplied parameters order and orderby, impacting all versions up to and including 2.7. Exploitation requires authentication at Subscriber l...