Medium · 6.5 CVE-2026-45435 EUVD-2026-31764GHSA-vx32-gc9p-9pfp

WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

Published May 25, 2026 · Updated May 26, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS.

This issue affects WP Activity Log: from n/a through 5.6.3.

Vendor	Product	Affected	Fixed
Melapress	WP Activity Log	≤ 5.6.3	—