What’s Vulnerable › Products

Melapress WP Activity Log vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your Melapress WP Activity Log version is affected

Latest Melapress WP Activity Log vulnerabilities

• CVE-2026-62085 — WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2026-65512 — WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
• CVE-2026-56005 — WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-54806 — WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2026-45435 — WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-25331 — WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-0767 — WP Activity Log 5.3.2 - Insecure deserialization (CVSS 9.8)
• CVE-2025-0924 — WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting (CVSS 6.1)
• CVE-2024-10793 — WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter (CVSS 6.1)
• CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks (CVSS 6.3)
• CVE-2024-2018 — WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection (CVSS 8.8)
• CVE-2023-50905 — WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)