switcorp vulnerabilities

4 published CVEs name switcorp among the affected products.

Critical 0High 1Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-107648
WP Sessions Time Monitoring Full Automatic <= 1.1.5 - Unauthenticated Stored Cross-Site Scripting via 'action' GET Parameter
switcorp · WP Sessions Time Monitoring Full Automatic
High7.2
CVE-2026-1671
Activity Log for WordPress <= 1.2.8 - Missing Authorization to Sensitive Information Exposure via Log File
switcorp · Activity Log for WordPress
Medium6.5
CVE-2025-5814
Profiler – What Slowing Down Your WP <= 1.0.0 - Missing Authentication to Unauthenticated Arbitrary Plugin Reactivation via State Restoration
switcorp · Profiler – What Slowing Down Your WP
Medium5.3
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3