Solwininfotech vulnerabilities

Products

• User Activity Log 8
• Blog Designer 2
• Trash Duplicate And 301 Redirect 2

Newest

• solwininfotech user activity log User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login CVE-2025-11877 7.5 HighJanuary 7, 2026
• solwininfotech trash duplicate and 301 redirect WordPress Trash Duplicate and 301 Redirect plugin <= 1.9.1 - Broken Access Control vulnerability CVE-2025-62122 5.3 MediumDecember 31, 2025
• solwininfotech blog designer WordPress Blog Designer Plugin <= 3.1.8 - Broken Access Control Vulnerability CVE-2025-57990 5.4 MediumSeptember 22, 2025
• solwininfotech wp social stream designer WordPress WP Social Stream Designer plugin <= 1.3 - SQL Injection vulnerability CVE-2025-32677 7.6 HighApril 9, 2025
• solwininfotech trash duplicate and 301 redirect Trash Duplicate and 301 Redirect <= 1.9 - Missing Authorization to Unauthenticated Arbitrary Post Deletion CVE-2024-13468 7.5 HighFebruary 19, 2025
• solwininfotech timeline designer Timeline Designer <= 1.4 - Authenticated (Admin+) SQL Injection CVE-2024-11437 4.9 MediumJanuary 7, 2025
• solwin user activity log pro, solwininfotech user activity log +1 more WordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerability CVE-2024-32137 8.5 HighApril 15, 2024
• solwin infotech user blocker WordPress User Blocker Plugin <= 1.5.5 is vulnerable to CSV Injection CVE-2022-45078 5.9 MediumNovember 7, 2023
• solwin infotech user activity log WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection CVE-2023-37966 7.6 HighOctober 31, 2023
• solwininfotech user activity log, unknown user-activity-log-pro +1 more User Activity Log Pro < 2.3.4 - IP Spoofing CVE-2023-5133 7.5 HighOctober 16, 2023
• solwininfotech user activity log, unknown user-activity-log-pro +1 more User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent CVE-2023-5167 5.4 MediumOctober 16, 2023
• solwininfotech user activity log User Activity Log < 1.6.7 - IP Spoofing CVE-2023-4279 Public exploit 7.5 HighSeptember 4, 2023
• solwininfotech user activity log User Activity Log < 1.6.6 - Subscriber+ Log Export CVE-2023-4269 4.3 MediumSeptember 4, 2023
• solwin infotech responsive wordpress slider – avartan slider lite, solwininfotech avartan-slider-lite +1 more WordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-30485 7.1 HighSeptember 4, 2023
• solwininfotech user activity log User Activity Log < 1.6.5 - Unauthenticated SQLi CVE-2023-3435 9.8 CriticalAugust 14, 2023
• solwininfotech user activity log User Activity Log < 1.6.3 - Admin+ SQL Injection CVE-2023-2761 7.2 HighJuly 24, 2023
• solwininfotech blog designer Blog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via Shortcode CVE-2022-4793 5.4 MediumJanuary 30, 2023