User Activity Log Pro

User Activity Log Pro has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; 2 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.7, and the most serious one scores 9.9 out of 10. Severity breakdown: 1 critical and 1 high. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Scripting, behind 1 of the records (25%). Other recurring categories include Improper Input Validation, Missing Authorization.

2 of the records (50%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2024.

2 independent researchers contributed these findings, most of them (2) reported by Bartłomiej Marek.

Strategic Overview

Avg CVSSMedium

6.7/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all User Activity Log Pro vulnerabilities before they are exploited.

Most severe open issueCVSS 9.9CVE-2024-32137

User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection

Read the full analysis

Vulnerability Records

4 records


2024-07-09 00:00	User Activity Log Pro <= 2.3.4 - Missing Authorization User Activity Log Pro <= 2.3.4	`CVE-2024-37929`	4.3 Medium	Dave Jong	No
2024-04-12 00:00	User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection User Activity Log Pro <= 2.3.4	`CVE-2024-32137`	9.9 Critical	Dave Jong	No
2023-09-25 00:00	User Activity Log Pro <= 2.3.3 - Tracking Bypass via IP Spoofing User Activity Log Pro <= 2.3.3	`CVE-2023-5133`	5.3 Medium	Bartłomiej Marek	Yes
2023-09-25 00:00	User Activity Log Pro <= 2.3.3 - Unauthenticated Stored Cross-Site Scripting via User-Agent header User Activity Log Pro <= 2.3.3	`CVE-2023-5167`	7.2 High	Bartłomiej Marek	Yes

Showing 1–4 of 4 reports