Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-121573 EUVD-2026-120164GHSA-5rx2-rcj7-mj3j

WordPress WP Activity Log plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability

Published Nov 9, 2026 · Updated Nov 9, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.7.

Affected products

VendorProductAffectedFixed
Melapress WP Activity Log ≤ 5.6.7 —

References