Activity-log.com vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Activity-log.com products: 3 record(s), with severity, exploitation and fixes.

WP Sessions Time Monitoring Full Automatic 2 WP System Log 1

Exploited only (KEV) →

CVE-2026-39581 High · 8.5 CWE-89 Jun 16, 2026

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.4 - SQL Injection vulnerability

Subscriber SQL Injection in WP Sessions Time Monitoring Full Automatic <= 1.1.4 versions.

CVE-2026-24987 Medium · 6.5 CWE-862 Mar 25, 2026

WordPress WP System Log plugin <= 1.2.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP System Log: from n/a through <= 1.2.7.

CVE-2026-32362 Medium · 5.3 CWE-862 Mar 13, 2026

WordPress WP Sessions Time Monitoring Full Automatic plugin <= 1.1.3 - Broken Access Control vulnerability

Missing Authorization vulnerability in activity-log.com WP Sessions Time Monitoring Full Automatic activitytime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through <= 1.1.3.