S4E just found a low-severity finding from missing http security headers implementation scanner

CVE

CVE-2023-6030

5.4

CVSSmedium

Exploitable remotely over the internet · low-privilege account sufficient.

Description

The LogDash Activity Log WordPress plugin before 1.1.4 hooks the wp_login_failed function (from src/Hooks/Users.php) in order to log failed login attempts to the database but it doesn't escape the username when it perform some SQL request leading to a SQL injection vulnerability which can be exploited using time-based technique by unauthenticated attacker

Attack Vector

Network

Privileges Req.

Low

User Interaction

None

logdash activity log

Updated Sep 28, 2026View on NVD →

S4E scanner

criticalProduct Based Web Vulnerabilities~10 seconds

CVE-2023-6030 Scanner

CVE-2023-6030 Scanner - SQL Injection vulnerability in LogDash Activity Log plugin for WordPress

Used 2.8k times · 3.3k assets checked · domain, subdomain, ipv4

Scanner page →Run scanner

CVE history: logdash activity log

Predict next CVE date with AI

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →