Pojo Activity Log — known CVE vulnerabilities

Every CVE whose affected-product data names Pojo Activity Log, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2024-10788 — CVSS 7.2 (high): The Activity Log – Monitor & Record User Changes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the event…
• CVE-2016-10890 — CVSS 6.1 (medium): The aryo-activity-log plugin before 2.3.2 for WordPress has XSS.
• CVE-2016-10891 — CVSS 6.1 (medium): The aryo-activity-log plugin before 2.3.3 for WordPress has XSS.
• CVE-2018-8729 — CVSS 6.1 (medium): Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject…