User Activity Log

user-activity-log · plugin

Known security vulnerabilities for User Activity Log. Find out in seconds which version runs on your site with WP Lens.

3 known vulnerabilities

1 critical · latest Jan 7, 2026

Vulnerabilities

CVE-2023-37966
WordPress User Activity Log Plugin <= 1.6.2 is vulnerable to SQL Injection
Critical 9.8
CVE-2024-31356
WordPress User Activity Log plugin <= 1.8 - Auth. SQL Injection vulnerability
High 7.6
CVE-2025-11877
User Activity Log <= 2.2 - Unauthenticated Limited Options Update via Failed Login
High 7.5