What’s Vulnerable › Products

gdragon coreActivity: Activity Logging for WordPress vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your gdragon coreActivity: Activity Logging for WordPress version is affected

Latest gdragon coreActivity: Activity Logging for WordPress vulnerabilities

• CVE-2026-7635 — coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field (CVSS 8.1)
• CVE-2025-3436 — coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection (CVSS 6.5)