wpsecurityauditlog vulnerabilities

Products

• wp security audit log 2

Latest wpsecurityauditlog CVEs

Newest publication first

1. CVE-2014-5072 WP Activity Log <= 1.2.4 - Cross-Site Request Forgery

   Published 2018-04-06

   High·CVSS 8.8

   Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

2. CVE-2018-8719 WP Security Audit Log <= 3.1.1 - Sensitive Information Disclosure

   Published 2018-04-04

   Medium·CVSS 5.3 Public exploit

   An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by Google and allows for attackers to possibly find sensitive information.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.