coreActivity: Activity Logging for WordPress vulnerabilities
We track 1 vulnerability in coreActivity: Activity Logging for WordPress products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2025.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest coreActivity: Activity Logging for WordPress vulnerabilities
- 8.8 High severity
coreActivity: Activity Logging for WordPress: Improper Neutralization of Input During Web Page Generation
The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated users to perform Stored XSS attack against high privilege users such as admin