User Activity vulnerabilities
We track 1 vulnerability in User Activity products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on February 27, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest User Activity vulnerabilities
- 7.5 High severity
User Activity: Authentication Bypass by Spoofing
The User Activity WordPress plugin through 1.0.1 checks headers such as the X-Forwarded-For to retrieve the IP address of the request, which could lead to IP spoofing