coreActivity: Activity Logging for WordPress vulnerabilities
1 known vulnerability in coreActivity: Activity Logging for WordPress from Gdragon. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest first
- 8.1 High severity
coreActivity: Activity Logging for WordPress: Deserialization of Untrusted Data
The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0. This is due to the plugin failing to validate or strip PHP serialization syntax from the User-Agent HTTP head