User Activity Log

Explore User Activity Log vulnerabilities across all versions. Currently tracking 11 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.9/ 10

Patch Coverage82%

Open

Fixed

Get automatic notifications for all User Activity Log vulnerabilities before they are exploited.

Vulnerability Records

11 records


2026-01-06 19:31	User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login User Activity Log <= 2.2	`CVE-2025-11877`	7.5 High	shark3y	No
2026-01-06 00:00	User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update User Activity Log <= 2.2	`CVE-2025-13471`	5.3 Medium	Alex Tselevich (nos3curity)	No
2024-04-07 00:00	User Activity Log <= 1.9 - Authenticated (Administrator+) SQL Injection User Activity Log <= 1.9	`CVE-2024-31356`	9.1 Critical	Muhammad Daffa	Yes
2023-08-14 00:00	User Activity Log <= 1.6.6 - IP Address Spoofing User Activity Log <= 1.6.6	`CVE-2023-4279`	5.3 Medium	Bartłomiej Marek	Yes
2023-08-08 00:00	User Activity Log <= 1.6.5 - Unauthenticated Data Export to Sensitive Information Disclosure User Activity Log <= 1.6.5	`CVE-2023-4269`	7.5 High	Daniel Ruf	Yes
2023-07-24 00:00	User Activity Log <= 1.6.4 - Unauthenticated SQL Injection User Activity Log <= 1.6.4	`CVE-2023-3435`	7.5 High	Marc-Alexandre Montpas	Yes
2023-07-14 00:00	User Activity Log <= 1.6.2 - Unauthenticated SQL Injection via username User Activity Log <= 1.6.2	`N/A`	8.1 High	Anonymous	Yes
2023-07-12 00:00	User Activity Log <= 1.6.2 - Authenticated (Administrator+) SQL Injection User Activity Log <= 1.6.2	`CVE-2023-37966`	7.2 High	LEE SE HYOUNG	Yes
2023-05-25 00:00	User Activity Log <= 1.6.2 - Authenticated(Administrator+) SQL Injection via txtsearch User Activity Log <= 1.6.2	`CVE-2023-2761`	6.6 Medium	Ilyase Dehy	Yes
2021-08-30 00:00	User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting User Activity Log <= 1.4.6	`N/A`	6.1 Medium	Anonymous	Yes

Showing 1–10 of 11 reports