What’s Vulnerable › Products

User Activity Log vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your User Activity Log version is affected

Latest User Activity Log vulnerabilities

• CVE-2025-13471 — User Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update (CVSS 5.3)
• CVE-2025-11877 — User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login (CVSS 7.5)
• CVE-2024-32137 — WordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerability (CVSS 8.5)
• CVE-2024-31356 — WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability (CVSS 7.6)
• CVE-2023-37966 — WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2023-5167 — User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent (CVSS 5.4)
• CVE-2023-5133 — User Activity Log Pro < 2.3.4 - IP Spoofing (CVSS 7.5)
• CVE-2023-4279 — User Activity Log < 1.6.7 - IP Spoofing (CVSS 7.5)
• CVE-2023-4269 — User Activity Log < 1.6.6 - Subscriber+ Log Export (CVSS 4.3)
• CVE-2023-3435 — User Activity Log < 1.6.5 - Unauthenticated SQLi (CVSS 9.8)
• CVE-2023-2761 — User Activity Log < 1.6.3 - Admin+ SQL Injection (CVSS 7.2)