{"id":"CVE-2026-42673","aliases":["EUVD-2026-33690","GHSA-873w-p97p-f26x"],"status":"published","title":"WordPress Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin \u003c= 3.3.6 - Sensitive Data Exposure vulnerability","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: from n/a through 3.3.6.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00245,"percentile":0.15866,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-201"],"published":"2026-06-01T15:24:05Z","modified":"2026-07-22T07:10:00Z","products":[{"vendor":"logtivity","product":"activity logs, user activity tracking, multisite activity log from logtivity"},{"vendor":"logtivity activity logs","product":"activity logs, user activity tracking, multisite activity log from logtivity"}],"references":[{"url":"https://patchstack.com/database/wordpress/plugin/logtivity/vulnerability/wordpress-activity-logs-user-activity-tracking-multisite-activity-log-from-logtivity-plugin-3-3-6-sensitive-data-exposure-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42673"},{"url":"https://github.com/advisories/GHSA-873w-p97p-f26x"}],"sources":{"cve":[{"id":"CVE-2026-42673","title":"WordPress Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin \u003c= 3.3.6 - Sensitive Data Exposure vulnerability","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: from n/a through 3.3.6.","status":"published","published":"2026-06-01T15:24:05.488Z","modified":"2026-06-01T17:06:40.773Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T13:40:35.004553Z"}],"euvd":[{"id":"EUVD-2026-33690","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: from n/a through 3.3.6.","status":"published","published":"2026-06-01T15:24:05Z","modified":"2026-06-01T17:06:40Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T18:20:57.828765Z"}],"ghsa":[{"id":"GHSA-873w-p97p-f26x","title":"Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs...","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: from n/a through 3.3.6.","status":"published","published":"2026-06-01T18:31:52Z","modified":"2026-06-01T18:31:53Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T15:08:27.436234Z"}],"nvd":[{"id":"CVE-2026-42673","description":"Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data.\n\nThis issue affects Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: from n/a through 3.3.6.","status":"published","published":"2026-06-01T17:16:59.793Z","modified":"2026-07-22T07:10:00.107Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"secondary"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:12:21.635958Z"}]}}