Coreactivity vulnerabilities

1 known vulnerability in Coreactivity from Dev4press. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  coreActivity: Activity Logging for WordPress: Improper Neutralization of Input During Web Page Generation

  CVE-2024-0852May 15, 2025coreActivity: Activity Logging for WordPress

  The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated users to perform Stored XSS attack against high privilege users such as admin