6.3
Medium
CVE-2025-0767 WP Activity Log 5.3.2 was found to be vulnerable
Description
WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Activity Log | 5.3.2 | No fix stated |
Other CVEs of WP Activity Log
The 15 CVEs of WP Activity Log →
CVE-2026-120075
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and…
7.2
High
CVE-2026-62085
Administrator SQL Injection in WP Activity Log <= 5.6.6 versions
7.6
High
CVE-2026-65512
Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium…
5.4
Medium
CVE-2026-56005
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…
7.1
High