Uncontrolled Resource Consumption Vulnerability in UserLog Plugin by WordPress

CVE-2025-55128

What is CVE-2025-55128?

A vulnerability has been identified in the UserLog plugin for WordPress, allowing an attacker with admin access to request an excessive number of items per page via the 'userlog-index.php' file. This could lead to a denial of service, significantly impacting the performance and availability of the application. It is crucial for administrators to review permissions and apply necessary restrictions to mitigate this risk.

References