solwininfotech records

11 published records for vendor solwininfotech.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 18.2%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-3435No exploit	User Activity Log < 1.6.5 - Unauthenticated SQLisolwininfotech · user activity log · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.0%	Aug 14, 2023
39Monitor	CVE-2023-37966No exploit	WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injectionsolwininfotech · user activity log · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Oct 31, 2023
34Monitor	CVE-2024-32137No exploit	WordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerabilitysolwin · user activity log pro · CWE-89 SQL injection	High8.5	—	0.5%	Apr 15, 2024
30Monitor	CVE-2023-4279Proof of concept	User Activity Log < 1.6.7 - IP Spoofingsolwininfotech · user activity log · CWE-290 Pre-auth Auth bypass	High7.5	—	0.9%	Sep 4, 2023
30Monitor	CVE-2023-5133No exploit	User Activity Log Pro < 2.3.4 - IP Spoofingsolwininfotech · user activity log · CWE-290 Pre-auth Auth bypass	High7.5	—	0.6%	Oct 16, 2023
28Monitor	CVE-2023-2761No exploit	User Activity Log < 1.6.3 - Admin+ SQL Injectionsolwininfotech · user activity log · CWE-89 SQL injection	High7.2	—	0.9%	Jul 24, 2023
28Monitor	CVE-2022-45078No exploit	WordPress User Blocker Plugin <= 1.5.5 is vulnerable to CSV Injectionsolwininfotech · user blocker · CWE-1236	High7.2	—	0.6%	Nov 7, 2023
24Monitor	CVE-2023-30485No exploit	WordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)solwininfotech · avartan-slider-lite · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Sep 4, 2023
21Monitor	CVE-2022-4793No exploit	Blog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via Shortcodesolwininfotech · blog designer · CWE-79 XSS	Medium5.4	—	0.6%	Jan 30, 2023
21Monitor	CVE-2023-5167No exploit	User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agentsolwininfotech · user activity log · CWE-79 XSS	Medium5.4	—	0.4%	Oct 16, 2023
17Monitor	CVE-2023-4269No exploit	User Activity Log < 1.6.6 - Subscriber+ Log Exportsolwininfotech · user activity log · CWE-863 Broken access control (IDOR)	Medium4.3	—	0.5%	Sep 4, 2023

CVE-2023-3435
39Monitor
User Activity Log < 1.6.5 - Unauthenticated SQLi
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
solwininfotech · user activity logAug 14, 2023
CVE-2023-37966
39Monitor
WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
solwininfotech · user activity logOct 31, 2023
CVE-2024-32137
34Monitor
WordPress User Activity Log Pro plugin <= 2.3.4 - Auth. SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
solwin · user activity log proApr 15, 2024
CVE-2023-4279
30Monitor
User Activity Log < 1.6.7 - IP Spoofing
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
solwininfotech · user activity logSep 4, 2023
CVE-2023-5133
30Monitor
User Activity Log Pro < 2.3.4 - IP Spoofing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
solwininfotech · user activity logOct 16, 2023
CVE-2023-2761
28Monitor
User Activity Log < 1.6.3 - Admin+ SQL Injection
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
solwininfotech · user activity logJul 24, 2023
CVE-2022-45078
28Monitor
WordPress User Blocker Plugin <= 1.5.5 is vulnerable to CSV Injection
HighCVSS 7.2No exploitEPSS 0%
solwininfotech · user blockerNov 7, 2023
CVE-2023-30485
24Monitor
WordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
solwininfotech · avartan-slider-liteSep 4, 2023
CVE-2022-4793
21Monitor
Blog Designer – Post and Widget < 2.4.1 - Contributor+ Stored XSS via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
solwininfotech · blog designerJan 30, 2023
CVE-2023-5167
21Monitor
User Activity Log Pro < 2.3.4 - Unauthenticated Stored Cross-Site Scripting via User Agent
MediumCVSS 5.4No exploitEPSS 0%
- XSS
solwininfotech · user activity logOct 16, 2023
CVE-2023-4269
17Monitor
User Activity Log < 1.6.6 - Subscriber+ Log Export
MediumCVSS 4.3No exploitEPSS 0%
- Broken access control (IDOR)
solwininfotech · user activity logSep 4, 2023