Activity Log WinterLock WordPress Plugin Cross-Site Request Forgery Vulnerability
Vulnerability
A cross-site request forgery (CSRF) vulnerability has been identified in the Activity Log WinterLock WordPress plugin, specifically in versions prior to 1.2.5. This vulnerability allows an attacker to delete log data if a user is tricked into viewing a malicious page while logged in.
Impact
Exploitation of this vulnerability could lead to unauthorized deletion of log data.
Remediation
Users are advised to update the Activity Log WinterLock WordPress plugin to version 1.2.5 or later.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
6.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.