CVE-2025-11877

Name of the Vulnerable Software and Affected Versions User Activity Log plugin versions prior to and including 2.2

Description The User Activity Log plugin has an issue where the failed-login handler ual shook wp login failed does not perform a capability check. This allows unauthenticated attackers to modify site options using update option() calls. Specifically, attackers can change options from 0 to a non-zero value, potentially reopening registration or corrupting options like wp user roles, which can disrupt access to the wp-admin interface.

Recommendations Update the User Activity Log plugin to a version newer than 2.2.