Logtivity WordPress Plugin Sensitive Data Exposure Vulnerability

A vulnerability allowing the exposure of sensitive information has been identified in the Logtivity WordPress plugin, specifically in the Activity Logs, User Activity Tracking, and Multisite Activity Log features. This issue affects versions through 3.3.6.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information embedded in activity logs, which could then be used to exploit other weaknesses in the system.

Remediation

Users of the Logtivity WordPress plugin should update to version 3.3.7 or later. Patchstack users can enable auto-update for vulnerable plugins.