Solwininfotech vulnerabilities
We track 4 vulnerabilities in Solwininfotech products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on January 7, 2026.
Latest Solwininfotech vulnerabilities
- 7.5 High severity
User Activity Log: Missing Authorization
The User Activity Log plugin is vulnerable to a limited options update in versions up to, and including, 2.2. The failed-login handler 'ual_shook_wp_login_failed' lacks a capability check and writes failed usernames directly into update_option() calls. This ma
- 7.6 High severity
WP Social Stream Designer: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in solwininfotech WP Social Stream Designer social-stream-design allows Blind SQL Injection.This issue affects WP Social Stream Designer: from n/a through <= 1.3
- 7.5 High severity
Trash Duplicate and 301 Redirect: Missing Authorization
The Trash Duplicate and 301 Redirect plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'duplicates-action-top' action in all versions up to, and including, 1.9. This makes it possible for unauthenticated a
- 8.5 High severity
User Activity Log Pro: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Solwin User Activity Log Pro.This issue affects User Activity Log Pro: from n/a through 2.3.4.