Skip to content
Wpwhitesecurity vulnerabilities
Newest
-
melapress wp activity log, wp activity log premium +1 more
WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-65512
5.4 Medium
-
melapress wp activity log, wpwhitesecurity wp activity log premium +1 more
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
CVE-2024-2018
8.8 High
-
melapress wp 2fa – two-factor authentication for wordpress, wpwhitesecurity wp 2fa +1 more
WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending
CVE-2023-6506
4.3 Medium
-
melapress wp activity log, wpwhitesecurity wp activity log premium +1 more
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
CVE-2023-2261
4.3 Medium
-
melapress wp activity log, wpwhitesecurity wp activity log premium +1 more
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
CVE-2023-2286
4.3 Medium
-
wpwhitesecurity wp activity log premium, wp activity log +1 more
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
CVE-2023-2284
4.3 Medium
-
wpwhitesecurity wp activity log premium, wp activity log +1 more
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
CVE-2023-2285
4.3 Medium
-
melapress wp activity log
WP Activity Log <= 4.0.1 - Missing Authorization
CVE-2020-36716
7.3 High
-
unknown wp 2fa
WP 2FA < 2.3.0 - Time-Based Side-Channel Attack
CVE-2022-2891
5.9 Medium
-
unknown website file changes monitor
Website File Changes Monitor < 1.8.3 - Admin+ SQLi
CVE-2022-2269
9.8 Critical
-
unknown captcha 4wp
CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF
CVE-2022-2184
8.8 High
-
wpwhitesecurity wp 2fa, melapress wp 2fa – two-factor authentication for wordpress +1 more
WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
CVE-2022-1527
6.1 Medium