Vulnérabilités connues pour Melapress WP Activity Log
Votre version est-elle touchée ?
Liste des CVE
| CVE | Résumé | Score | Publiée |
|---|---|---|---|
| CVE-2026-120075 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and… | 7.2 Élevée | 31 oct. 2026 |
| CVE-2026-62085 | Administrator SQL Injection in WP Activity Log <= 5.6.6 versions | 7.6 Élevée | 30 sept. 2026 |
| CVE-2026-65512 | Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium… | 5.4 Moyenne | 23 juil. 2026 |
| CVE-2026-56005 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 7.1 Élevée | 25 juin 2026 |
| CVE-2026-54806 | Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions | 9.8 Critique | 17 juin 2026 |
| CVE-2026-45435 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 6.5 Moyenne | 25 mai 2026 |
| CVE-2026-25331 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 6.5 Moyenne | 19 févr. 2026 |
| CVE-2025-0767 | WP Activity Log 5.3.2 was found to be vulnerable | 6.3 Moyenne | 27 févr. 2025 |
| CVE-2025-0924 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all… | 7.2 Élevée | 17 févr. 2025 |
| CVE-2024-10793 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all… | 7.2 Élevée | 15 nov. 2024 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Moyenne | 16 oct. 2024 |
| CVE-2023-50905 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 7.1 Élevée | 29 févr. 2024 |
| CVE-2023-2261 | The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on… | 4.3 Moyenne | 9 juin 2023 |
| CVE-2023-2286 | The WP Activity Log for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0 | 4.3 Moyenne | 9 juin 2023 |
| CVE-2020-36716 | The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on… | 7.3 Élevée | 7 juin 2023 |
Autres produits Melapress
MelaPress Login Security 4
WP 2FA 3
Admin Notices Manager 2
wp_2fa 2
WP 2FA – Two-factor authentication for WordPress 2
wp_activity_log 2
Activity Log For MainWP 1
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress 1
Melapress File Monitor 1
MelaPress Login Security Premium 1
Melapress Role Editor 1
WP Activity Log Premium 1