CVE-2025-11877 | User Activity Log Plugin up to 2.2 on WordPress Options Update update_option improper authorization

A vulnerability was found in User Activity Log Plugin up to 2.2 on WordPress. It has been rated as critical. This issue affects the function update_option of the component Options Update Handler. This manipulation causes improper authorization.

This vulnerability is handled as CVE-2025-11877. The attack can be initiated remotely. There is not any exploit available.