wpsecurityauditlog wp security audit log vulnerabilities

Latest wpsecurityauditlog wp security audit log CVEs

Newest publication first

1. CVE-2014-5072 WP Activity Log <= 1.2.4 - Cross-Site Request Forgery

   Published 2018-04-06

   High·CVSS 8.8 EPSS 0.84%

   Cross-site request forgery (CSRF) vulnerability in WP Security Audit Log plugin before 1.2.5 for WordPress allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.

2. CVE-2018-8719 WP Security Audit Log <= 3.1.1 - Sensitive Information Disclosure

   Published 2018-04-04

   Medium·CVSS 5.3 EPSS 15.6% Public exploit

   An issue was discovered in the WP Security Audit Log plugin 3.1.1 for WordPress. Access to wp-content/uploads/wp-security-audit-log/* files is not restricted. For example, these files are indexed by Google and allows for attackers to possibly find sensitive information.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.