Input validation vulnerability in User Activity Log 1.6.2

The User Activity Log plugin for WordPress, up to version 1.6.2, has a security vulnerability that can be exploited by attackers with administrator-level access. This vulnerability can be used to extract sensitive information from the database by adding extra SQL queries to existing queries. This is possible because the plugin does not properly escape user supplied parameters nor prepare existing SQL queries.

Detected in:

User Activity Log fixed vulnerable versions: >= * <= 1.6.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.