critical9.8
CVE-2023-3435
The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its…
Impact
The User Activity Log WordPress plugin before 1.6.5 does not correctly sanitise and escape several parameters before using it in a SQL statement as part of its exportation feature, allowing unauthenticated attackers to conduct SQL injection attacks.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solwininfotech | User Activity Log | before 1.6.5 |