Login Request a demo
WA
Product
WP Activity Log
by Melapress · last CVE Sep 30, 2026
11
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 2High 3Medium 6Low 0
Severity
All severities11Critical2High3Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Activity Log to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54806
9.8
1%
Jun 17
WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability
Affected: through 5.6.3.1
CVE-2025-0767
9.8
0%
Feb 27
WP Activity Log 5.3.2 was found to be vulnerable
Affected: 5.3.2
CVE-2024-2018
8.8
1%
Apr 9
The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all versions up to, and including, 4.6.4 due to insufficient…
Affected: before 4.6.4.1
CVE-2026-62085
7.6
0%
Sep 30
WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability
Affected: through 5.6.6
CVE-2026-56005
7.1
0%
Jun 25
WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.6.3.1
CVE-2026-45435
6.5
0%
May 25
WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.6.3
CVE-2026-25331
6.5
0%
Feb 19
WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.5.4
CVE-2025-0924
6.1
1%
Feb 17
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient…
Affected: before 5.3.0
CVE-2024-10793
6.1
1%
Nov 15
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient…
Affected: before 5.2.2
CVE-2023-50905
6.1
0%
Feb 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity…
Affected: before 4.6.2
CVE-2026-65512
5.4
0%
Jul 23
WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 5.6.4
Showing 11