CVE-2023-2761

Summary

CVE-2023-2761 is a vulnerability affecting the User Activity Log plugin for WordPress. This issue allows SQL injection attacks by not properly sanitizing and escaping the `txtsearch` parameter before using it in SQL statements on certain admin pages. High privilege users, such as admins, can exploit this vulnerability to gain unauthorized access or manipulate data within the affected WordPress installation. It's essential to update the plugin to version 1.6.3 or higher to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.