Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 5:1 p.m.3 views

CVE-2026-24987

Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP System Log: from n/a through = 1.2.7...

6.5CVSS5.8AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2026/03/25 5:16 p.m.1 views

CVE-2026-24987

Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP System Log: from n/a through = 1.2.7...

6.5CVSS0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/03/25 12:0 a.m.3 views

WordPress plugin WP System Log 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

6.5CVSS5.8AI score0.00015EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/02/16 10:46 a.m.4 views

WordPress Activity Log for WordPress plugin <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File vulnerability

Missing Authorization to Sensitive Information Exposure via Log File vulnerability discovered by WordFence in WordPress Plugin WP System Log versions = 1.2.8...

6.5CVSS5.5AI score0.00018EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/05/22 6:24 p.m.4 views

CVE-2021-24756

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs...

6.1CVSS6.3AI score0.15849EPSS
Exploits2References1
NVD
NVD
added 2021/12/13 11:15 a.m.8 views

CVE-2021-24756

The WP System Log WordPress plugin before 1.0.21 does not sanitise, validate and escape the IP address retrieved from login requests before outputting them in the admin dashboard, which could allow unauthenticated attacker to perform Cross-Site Scripting attacks against admins viewing the logs...

6.1CVSS0.15849EPSS
Exploits2References1
CVE
CVE
added 2021/12/13 10:40 a.m.50 views

CVE-2021-24756

The WP System Log plugin (WordPress) before version 1.0.21 does not sanitize, validate, or escape the IP address parsed from login requests, allowing an unauthenticated attacker to trigger Cross‑Site Scripting in admins viewing the Activity/Log dashboard. A fix is to upgrade to 1.0.21 or newer (r...

6.1CVSS6AI score0.15849EPSS
Exploits2References1Affected Software1
Rows per page
Query Builder