CVE-2026-62085 Administrator SQL Injection in WP Activity Log <= 5.6.6 versions

Description

Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.

Affected products and versions

Product	Affected versions	Fixed in
WP Activity Log 5.6	earliest → 5.6.6	No fix stated

Other CVEs of WP Activity Log

The 15 CVEs of WP Activity Log →

CVE-2026-120075 The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and… 7.2 High CVE-2026-65512 Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium… 5.4 Medium CVE-2026-56005 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… 7.1 High CVE-2026-54806 Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions 9.8 Critical