Unknown Activity Log vulnerabilities

• elementor activity log WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-84759 7.1 HighSeptember 2, 2026
• unknown user activity log User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update CVE-2025-13471 5.3 MediumJanuary 28, 2026
• solwininfotech user activity log User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login CVE-2025-11877 7.5 HighJanuary 7, 2026
• dev4press coreactivity, gdragon coreactivity: activity logging for wordpress +1 more coreActivity < 1.8.1 - Unauthenticated Stored XSS CVE-2024-0852 8.8 HighMay 15, 2025
• deryckoe logdash activity log LogDash Activity Log < 1.1.4 - Unauthenticated SQLi CVE-2023-6030 5.4 MediumMay 15, 2025
• dev4press coreactivity, unknown coreactivity: activity logging plugin for wordpress +1 more coreActivity < 2.1 - Unauthenticated IP Spoofing CVE-2024-0868 5.3 MediumApril 17, 2024
• solwin infotech user activity log WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability CVE-2024-31356 7.6 HighApril 10, 2024
• solwin infotech user activity log WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection CVE-2023-37966 7.6 HighOctober 31, 2023
• activity log project log, unknown activity log +1 more Activity Log < 2.8.8 - IP Spoofing CVE-2023-4281 Public exploit 5.3 MediumSeptember 25, 2023
• solwininfotech user activity log User Activity Log < 1.6.7 - IP Spoofing CVE-2023-4279 Public exploit 7.5 HighSeptember 4, 2023
• solwininfotech user activity log User Activity Log < 1.6.6 - Subscriber+ Log Export CVE-2023-4269 4.3 MediumSeptember 4, 2023
• solwininfotech user activity log User Activity Log < 1.6.5 - Unauthenticated SQLi CVE-2023-3435 9.8 CriticalAugust 14, 2023
• solwininfotech user activity log User Activity Log < 1.6.3 - Admin+ SQL Injection CVE-2023-2761 7.2 HighJuly 24, 2023