User Login History

User Login History has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2017 and 2026; all 5 are fixed as of October 2026. Their average CVSS score is 7.0, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2019 was the busiest year with 2 disclosures.

The most common weakness is SQL Injection, behind 3 of the records (60%). Other recurring categories include Cross-Site Scripting.

Every one of the 5 issues recorded for User Login History has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSHigh

7.0/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all User Login History vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8

User Login History <= 1.7.0 - SQL Injection via Order By

Read the full analysis

Vulnerability Records

5 records


2026-08-15 17:24	User Login History <= 2.1.7 - Authenticated (Administrator+) SQL Injection via 'blog_id' Parameter User Login History <= 2.1.7	`CVE-2026-2283`	4.9 Medium	Nikola Kojic	Yes
2025-05-07 00:00	User Login History <= 2.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting User Login History <= 2.1.6	`CVE-2025-47676`	6.4 Medium	Muhammad Yudha - DJ	Yes
2019-03-16 00:00	User Login History <= 1.7.0 - SQL Injection via Order By User Login History 1.7.0	`N/A`	8.8 High	Anonymous	Yes
2019-03-16 00:00	User Login History <= 1.7.0 - SQL Injection via OrderBy User Login History 1.7.0	`N/A`	8.8 High	Anonymous	Yes
2017-10-26 00:00	User Login History Plugin <= 1.5.2 - Cross-Site Scripting User Login History < 1.6	`CVE-2017-15867`	6.1 Medium	Anonymous	Yes

Showing 1–5 of 5 reports