Skip to content
OpenAdvisories

Product · melapress

WP Activity Log

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-121573

    WordPress WP Activity Log plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7.

    melapress WP Activity Log
  • Medium 5.4
    CVE-2026-65512

    WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4.

    melapress WP Activity Log WP Activity Log Premium
  • Medium 6.5
    CVE-2026-45435

    WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a through 5.6.3.

    melapress WP Activity Log
  • Medium 6.5
    CVE-2026-25331

    WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows DOM-Based XSS.This issue affects WP Activity Log: from n/a through <= 5.5.4.

    melapress WP Activity Log
  • Medium 6.3
    CVE-2025-0767

    WP Activity Log 5.3.2 - Insecure deserialization

    WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.

    melapress WP Activity Log
  • Medium 4.3
    CVE-2023-2261

    WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration

    The WP Activity Log plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the handle_ajax_call function in versions up to, and including, 4.5.0. This makes it possible for authenticated attackers, with subscriber-leve…

    melapress wpwhitesecurity WP Activity Log WP Activity Log Premium Web / CMS
  • Medium 4.3
    CVE-2023-2286

    WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup

    The WP Activity Log for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.5.0. This is due to missing or incorrect nonce validation on the ajax_run_cleanup function. This makes it possible for unauthenticated attackers …

    melapress wpwhitesecurity WP Activity Log WP Activity Log Premium