WordPress plugin
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 2 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium2
- Low0
All Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Unauthenticated Information Exposure ≤3.3.6Update to 3.3.7 | CVE-2026-42673 | |
| Medium5.3 | Unauthenticated Information Disclosure via REST API ≤3.3.6Update to 3.3.7 | CVE-2026-8198 |
- Medium5.3Unauthenticated Information Exposure
≤3.3.6Update to 3.3.7
- Medium5.3Unauthenticated Information Disclosure via REST API
≤3.3.6Update to 3.3.7
Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: common questions
Does Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity have known vulnerabilities?
Yes. VulnCrest Radar lists 2 known vulnerabilities in Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity: 2 medium. None are known to affect version null.
How do I check which version of Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity vulnerability?
CVE-2026-42673, published May 14, 2026: Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity <= 3.3.6 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).
Is any Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity vulnerability listed in CISA KEV?
No. None of the known Activity Logs, User Activity Tracking, Multisite Activity Log from Logtivity vulnerabilities is currently listed in the CISA KEV catalog.