Known vulnerabilities in Melapress WP Activity Log
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-120075 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and… | 7.2 High | Oct 31, 2026 |
| CVE-2026-62085 | Administrator SQL Injection in WP Activity Log <= 5.6.6 versions | 7.6 High | Sep 30, 2026 |
| CVE-2026-65512 | Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium… | 5.4 Medium | Jul 23, 2026 |
| CVE-2026-56005 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 7.1 High | Jun 25, 2026 |
| CVE-2026-54806 | Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions | 9.8 Critical | Jun 17, 2026 |
| CVE-2026-45435 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 6.5 Medium | May 25, 2026 |
| CVE-2026-25331 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 6.5 Medium | Feb 19, 2026 |
| CVE-2025-0767 | WP Activity Log 5.3.2 was found to be vulnerable | 6.3 Medium | Feb 27, 2025 |
| CVE-2025-0924 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all… | 7.2 High | Feb 17, 2025 |
| CVE-2024-10793 | The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all… | 7.2 High | Nov 15, 2024 |
| CVE-2022-4974 | The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request… | 6.3 Medium | Oct 16, 2024 |
| CVE-2023-50905 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP… | 7.1 High | Feb 29, 2024 |
| CVE-2023-2261 | The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on… | 4.3 Medium | Jun 9, 2023 |
| CVE-2023-2286 | The WP Activity Log for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0 | 4.3 Medium | Jun 9, 2023 |
| CVE-2020-36716 | The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on… | 7.3 High | Jun 7, 2023 |
Other Melapress products
MelaPress Login Security 4
WP 2FA 3
Admin Notices Manager 2
wp_2fa 2
WP 2FA – Two-factor authentication for WordPress 2
wp_activity_log 2
Activity Log For MainWP 1
CAPTCHA 4WP – Antispam CAPTCHA solution for WordPress 1
Melapress File Monitor 1
MelaPress Login Security Premium 1
Melapress Role Editor 1
WP Activity Log Premium 1