CVE-2024-13668

Name of the Vulnerable Software and Affected Versions WordPress Activity O Meter plugin through version 1.0

Description The WordPress Activity O Meter plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admins.

Recommendations For WordPress Activity O Meter plugin version 1.0 and earlier, update to a version that addresses this issue, as using an unpatched version poses a significant risk. At the moment, there is no information about a newer version that contains a fix for this vulnerability.