VYPR

Logtivity

by WordPress

CVEs (2)

  • CVE-2026-42673HigJun 1, 2026
    risk 0.49cvss 7.5epss

    Insertion of Sensitive Information Into Sent Data vulnerability in Logtivity Activity Logs Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity allows Retrieve Embedded Sensitive Data. This issue affects Activity Logs, User Activity Tracking, Multisite…

  • CVE-2026-8198MedMay 9, 2026
    risk 0.27cvss 5.3epss 0.00

    The Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity plugin for WordPress is vulnerable to Authentication Bypass to Information Disclosure in versions up to, and including, 3.3.6. This is due to a logic flaw in the verifyAuthorization method where…