Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filtersUser Activity Log <= 2.2 - Unauthenticated Limited Arbitrary Option Update
User Activity Log Pro <= 2.3.4 - Missing Authorization
User Activity Log Pro <= 2.3.4 - Authenticated (Subscriber+) SQL Injection
User Activity Log <= 1.9 - Authenticated (Administrator+) SQL Injection
User Activity Log Pro <= 2.3.3 - Unauthenticated Stored Cross-Site Scripting via User-Agent header
User Activity Log Pro <= 2.3.3 - Tracking Bypass via IP Spoofing
User Activity Log <= 1.6.6 - IP Address Spoofing
User Activity Log <= 1.6.5 - Unauthenticated Data Export to Sensitive Information Disclosure
User Activity Log <= 1.6.4 - Unauthenticated SQL Injection
User Activity Log <= 1.6.2 - Unauthenticated SQL Injection via username
User Activity Log <= 1.6.2 - Authenticated (Administrator+) SQL Injection
User Activity Log <= 1.6.2 - Authenticated(Administrator+) SQL Injection via txtsearch
User Activity Log <= 1.4.6 - Reflected Cross Site Scripting
User Activity Log <= 1.4.6 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.