CVE-2018-8729

Multiple cross-site scripting (XSS) vulnerabilities in the Activity Log plugin before 2.4.1 for WordPress allow remote attackers to inject arbitrary JavaScript or HTML via a title that is not escaped.

• CWE-79

• https://github.com/pojome/activity-log/commit/950c46b2290c991187ff3471640e9688b16908fbPatch, Third Party Advisory
• https://github.com/pojome/activity-log/commit/e7bcd12fcb0add82bed762a971f427a360664bd9Patch, Release Notes, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/1836276Patch, Third Party Advisory
• https://wordpress.org/plugins/aryo-activity-log/#developersRelease Notes, Third Party Advisory
• https://www.exploit-db.com/exploits/44437/Exploit, Third Party Advisory, VDB Entry
• https://github.com/pojome/activity-log/commit/950c46b2290c991187ff3471640e9688b16908fbPatch, Third Party Advisory
• https://github.com/pojome/activity-log/commit/e7bcd12fcb0add82bed762a971f427a360664bd9Patch, Release Notes, Third Party Advisory
• https://plugins.trac.wordpress.org/changeset/1836276Patch, Third Party Advisory
• https://wordpress.org/plugins/aryo-activity-log/#developersRelease Notes, Third Party Advisory
• https://www.exploit-db.com/exploits/44437/Exploit, Third Party Advisory, VDB Entry

Published

Mar 15, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-8722Zoho ManageEngine Desktop Central version 9.1.0 build 91099 …
• CVE-2018-8724K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affecte…7.8
• CVE-2018-8725K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affec…7.8
• CVE-2018-8726K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affecte…7.8
• CVE-2018-8727Path Traversal in Gateway in Mirasys DVMS Workstation 5.12.6…
• CVE-2018-8728server/app/views/static/code.html in Kontena before 1.5.0 al…
• CVE-2018-8732Cross-site scripting (XSS) vulnerability in WampServer 3.1.1…
• CVE-2018-8733Authentication bypass vulnerability in the core config manag…
• CVE-2018-8734SQL injection vulnerability in the core config manager in Na…
• CVE-2018-8735Remote command execution (RCE) vulnerability in Nagios XI 5.…
• CVE-2018-8736A privilege escalation vulnerability in Nagios XI 5.2.x thro…
• CVE-2018-8737Bookme Control Panel 2.0 Application is vulnerable to stored…