Vulnerabilities > Wpwhitesecurity > WP Activity LOG > Medium
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-06-09 | CVE-2023-2261 | Unspecified vulnerability in Wpwhitesecurity WP Activity LOG 4.5.0 The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_ajax_call function in versions up to, and including, 4.5.0. | 4.3 |
| 2023-06-09 | CVE-2023-2284 | Unspecified vulnerability in Wpwhitesecurity WP Activity LOG 4.5.0 The WP Activity Log Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_switch_db function in versions up to, and including, 4.5.0. | 4.3 |
| 2023-06-09 | CVE-2023-2285 | Unspecified vulnerability in Wpwhitesecurity WP Activity LOG 4.5.0 The WP Activity Log Premium plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0. | 4.3 |
| 2023-06-09 | CVE-2023-2286 | Cross-Site Request Forgery (CSRF) vulnerability in Wpwhitesecurity WP Activity LOG The WP Activity Log for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0. | 4.3 |