WA
Product
WP Activity Log
11
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 3Medium 6Low 0
Watch
Add WP Activity Log to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-2018 | 8.8 | Apr 9 | The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all versions up to, and including, 4.6.4 due to insufficient… Affected: before 4.6.4.1 |
| CVE-2026-62085 | 7.6 | Sep 30 | WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability Affected: through 5.6.6 |
| CVE-2026-56005 | 7.1 | Jun 25 | WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.3.1 |
Showing 3