Skip to content
OpenAdvisories

Vendor

melapress

30 known vulnerabilities.

Products

WP Activity Log 15 MelaPress Login Security 4 WP 2FA 3 Melapress Role Editor 3 Admin Notices Manager 2 WP 2FA – Two-factor authentication for WordPress 2 MelaPress Login Security Premium 1 Melapress File Monitor 1 WP Activity Log Premium 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-54806 Public exploit

    WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.

    melapress WP Activity Log
  • High 7.2
    CVE-2025-0924 Public exploit

    WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting

    The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate…

    melapress WP Activity Log Web / CMS
  • High 7.2
    CVE-2024-10793 Public exploit

    WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter

    The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated …

    melapress WP Activity Log Web / CMS