PatchSiren

activity-log.com CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH activity-log.com CVE published 2026-06-16

CVE-2026-39581

A high-severity SQL injection vulnerability was discovered in the WP Sessions Time Monitoring Full Automatic plugin, version 1.1.4 and below. This vulnerability, tracked as CVE-2026-39581, allows subscribers to inject malicious SQL code, potentially leading to unauthorized data access and manipulation.