Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in History Log by click5 1.0.12

  • Severity: medium-risk
  • Status: Open
  • Publication: October 15, 2023

The History Log by click5 plugin for WordPress is vulnerable to something called a time-based SQL Injection. This is a type of attack that can be used by someone with administrator-level access to the website. It allows them to view sensitive information in the database by adding extra code to existing queries. This vulnerability affects all versions up to and including 1.0.12 due to a lack of escaping and preparation for user supplied parameters.

Detected in:

History Log by click5 open vulnerable versions: >= * <= 1.0.12

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.