5.4
Medium
CVE-2026-65512 Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium…
Description
Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Activity Log 5.6 | earliest → 5.6.4 | No fix stated |
| WP Activity Log Premium 5.6 | earliest → 5.6.4 | No fix stated |
Other CVEs of WP Activity Log
The 15 CVEs of WP Activity Log →
CVE-2026-120075
The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and…
7.2
High
CVE-2026-62085
Administrator SQL Injection in WP Activity Log <= 5.6.6 versions
7.6
High
CVE-2026-56005
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP…
7.1
High
CVE-2026-54806
Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions
9.8
Critical