CVE-2024-0868

The CVE-2024-0868 entry concerns the WordPress coreActivity: Activity Logging plugin for WordPress (versions

CVE-2024-0852

coreActivity: Activity Logging plugin for WordPress (prior to 1.8.1) is vulnerable to unauthenticated Stored XSS due to insufficient escaping of certain request data when rendering in the admin logs dashboard. The issue allows an unauthenticated attacker to craft input that could execute JavaScri...