Activity Log Project Activity Log — known CVE vulnerabilities

Every CVE whose affected-product data names Activity Log Project Activity Log, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-27858 — CVSS 7.4 (high): CSV Injection vulnerability in Activity Log Team Activity Log <= 2.8.3 on WordPress.
• CVE-2022-3941 — CVSS 5.3 (medium): A vulnerability has been found in Activity Log Plugin and classified as critical. This vulnerability affects unknown code of the component…
• CVE-2023-4281 — CVSS 5.3 (medium): This Activity Log WordPress plugin before 2.8.8 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to…