Lucene search
+L

52 matches found

Kitploit
Kitploit
added 2026/09/02 9:30 p.m.4 views

CVE-2024-10793

CVE-2024-10793 CVE-2024-10793 poc exploit Скрипт CVE-2024-10793.yaml необходим для поиска плагина. Скрипт CVE-2024-10793.sh — это сам эксплоит. Для пост-эксплуатации можно использовать beef-xss. Google dork: inurl:wp-content/plugins/wp-security-audit-log Плагин WP Activity Log для WordPress уязви...

7.2CVSS7.3AI score0.01369EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/02 1:37 p.m.5 views

CVE-2026-54806

WP Activity Log PHP 객체 주입 CVE-2026-54806 PoC 📜 설명 CVE-2026-54806은 Melapress의 WP Activity Log WordPress 플러그인wp-security-audit-log에서 발견된 치명적인CVSS 9.8 인증되지 않은 PHP 객체 주입 취약점입니다. 인증되지 않은 공격자는 기록된 이벤트예: 로그인 실패를 트리거하는 모든 요청의 User-Agent 헤더를 통해 직렬화된 PHP 객체를 주입할 수 있습니다. 주입된 페이로드는 데이터베이스에 저장되며, 관리자가 WordPre...

9.8CVSS5.9AI score0.00699EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/01 11:23 p.m.6 views

CVE-2025-0924-different

CVE-2025-0924 分析中に見つかったその他の脆弱性 01. Stored XSS と WordPress、WP Activity Log の概要 1 Stored XSS と WordPress、WP Activity Log の概要 Stored XSS は、悪意のあるスクリプトがサーバーに保存され、その後他のユーザーがそのページを開いたときに自動的に実行される脆弱性であり、CWE-79 Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'...

7.2CVSS7.2AI score0.01347EPSS
SaveExploits0
ATTACKERKB
ATTACKERKB
added 2026/07/23 11:19 a.m.13 views

CVE-2026-65512

Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...

5.4CVSS5.4AI score0.00143EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/23 11:19 a.m.37 views

CVE-2026-65512 WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Cross-Site request forgery CSRF vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4...

5.4CVSS0.00143EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/23 11:19 a.m.11 views

EUVD-2026-48118

Unauthenticated Cross Site Request Forgery CSRF in WP Activity Log = 5.6.4 versions...

5.4CVSS5.3AI score0.00143EPSS
SaveExploits0References1
Patchstack
Patchstack
added 2026/06/19 8:51 a.m.15 views

WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by daroo in WordPress Plugin WP Activity Log versions = 5.6.3.1...

7.1CVSS5.8AI score0.00251EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/06/05 7:33 p.m.19 views

CVE-2026-45435

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a through 5.6.3...

6.5CVSS5.4AI score0.00197EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/25 10:28 p.m.37 views

CVE-2026-45435 WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a through 5.6.3...

6.5CVSS0.00197EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/25 10:28 p.m.16 views

CVE-2026-45435 WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a through 5.6.3...

6.5CVSS5.8AI score0.00197EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/19 8:26 a.m.10 views

CVE-2026-25331

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log wp-security-audit-log allows DOM-Based XSS.This issue affects WP Activity Log: from n/a through = 5.5.4...

5.5AI score0.00156EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:59 a.m.20 views

CVE-2023-50905

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity Log: from n/a through 4.6.1...

7.1CVSS7.6AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/07 9:09 a.m.14 views

CVE-2024-2018

The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry-roles parameter in all versions up to, and including, 4.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possibl...

8.8CVSS7.5AI score0.00876EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2020-24158

Malware in sbrugna...

7.3CVSS7.4AI score0.00825EPSS
SaveExploits1References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2025-5996

Malicious code in bioql PyPI...

9.8CVSS8.7AI score0.0046EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/03 8:07 p.m.16 views

EUVD-2023-55638

Malicious code in bioql PyPI...

7.1CVSS7.5AI score0.00331EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 3:16 a.m.12 views

CVE-2023-2284

The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajaxswitchdb function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers with subscriber-level or higher to make...

4.3CVSS5.1AI score0.00386EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/01 6:25 p.m.23 views

CVE-2025-0767

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

9.8CVSS6.8AI score0.0046EPSS
SaveExploits0References4
NVD
NVD
added 2025/02/27 7:15 p.m.24 views

CVE-2025-0767

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php...

9.8CVSS0.0046EPSS
SaveExploits0References2
CVE
CVE
added 2025/02/27 6:14 p.m.57 views

CVE-2025-0767

CVE-2025-0767 pertains to WP Activity Log 5.3.2, where unvalidated user input is directly fed into PHP’s unserialize function inside myapp/classes/Writers/class-csv-writer.php. This is an insecure deserialization risk with high impact (per the cited metrics: CVSS 3.1 base score 9.8, high confiden...

9.8CVSS6.5AI score0.0046EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder