WordPress plugin

WP Sessions Time Monitoring Full Automatic security & vulnerabilities

Q: Is any WP Sessions Time Monitoring Full Automatic vulnerability listed in CISA KEV?

No. None of the known WP Sessions Time Monitoring Full Automatic vulnerabilities is currently listed in the CISA KEV catalog.

activitytime— active installsLast vulnerability Oct 15, 2026

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

Watch plugin

7Known vulnerabilities

Critical1
High2
Medium4
Low0

Vulnerabilities per year

All WP Sessions Time Monitoring Full Automatic vulnerabilities

WP Sessions Time Monitoring Full Automatic vulnerabilities
Severity	Vulnerability	CVE	Published
High7.2	Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter ≤1.1.5Update to 1.1.6	CVE-2026-107648	Oct 15
High7.5	Unauthenticated SQL Injection ≤1.0.9Update to 1.1.0	CVE-2024-49681	Oct 21, 2024
Critical9.8	Unauthenticated SQL injection ≤1.0.8Update to 1.0.9	CVE-2023-5203	Sep 11, 2023

High7.2
Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter
≤1.1.5Update to 1.1.6
CVE-2026-107648Oct 15
High7.5
Unauthenticated SQL Injection
≤1.0.9Update to 1.1.0
CVE-2024-49681Oct 21, 2024
Critical9.8
Unauthenticated SQL injection
≤1.0.8Update to 1.0.9
CVE-2023-5203Sep 11, 2023

WP Sessions Time Monitoring Full Automatic: common questions

Does WP Sessions Time Monitoring Full Automatic have known vulnerabilities?

Yes. VulnCrest Radar lists 7 known vulnerabilities in WP Sessions Time Monitoring Full Automatic: 1 critical, 2 high, 4 medium. At least one is not fixed in the latest version.

How do I check which version of WP Sessions Time Monitoring Full Automatic I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent WP Sessions Time Monitoring Full Automatic vulnerability?

CVE-2026-107648, published Oct 15, 2026: WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter. Severity: High (CVSS 7.2).

Is any WP Sessions Time Monitoring Full Automatic vulnerability listed in CISA KEV?

No. None of the known WP Sessions Time Monitoring Full Automatic vulnerabilities is currently listed in the CISA KEV catalog.