Search Results (22 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-0767 1 Melapress 1 Wp Activity Log 2025-05-21 9.8 Critical
WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.
CVE-2022-44587 1 Melapress 1 Wp 2fa 2024-11-21 5.3 Medium
Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.