CVE-2023-2761 (published 2023-07-24T10:20:26.121Z)
The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter before using it in a SQL statement in some admin pages, leading to a SQL injection exploitable by high privilege users such as admin.
Affected products: Vendor: Unknown
Product: User Activity Log
Versions: 0