WP Activity Log vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WA

Product

WP Activity Log

by melapress · last CVE Sep 30, 2026

14

CVEs

0

On KEV

9.8

Max CVSS

1

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 2High 4Medium 8Low 0

Severity

All severities14 Critical2 High4 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add WP Activity Log to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-54806	9.8	1%	Jun 17	WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability Affected: through 5.6.3.1
CVE-2025-0767	9.8	0%	Feb 27	WP Activity Log 5.3.2 - Insecure deserialization Affected: 5.3.2
CVE-2024-2018	8.8	1%	Apr 9	WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection Affected: before 4.6.4.1
CVE-2026-62085	7.6	0%	Sep 30	WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability Affected: through 5.6.6
CVE-2020-36716	7.3	1%	Jun 7	WP Activity Log <= 4.0.1 - Missing Authorization Affected: before 4.0.2
CVE-2026-56005	7.1	0%	Jun 25	WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.3.1
CVE-2026-45435	6.5	0%	May 25	WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability Affected: through 5.6.3
CVE-2026-25331	6.5	0%	Feb 19	WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability Affected: through 5.5.4
CVE-2025-0924	6.1	1%	Feb 17	WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting Affected: through 5.2.2
CVE-2024-10793	6.1	1%	Nov 15	WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter Affected: through 5.2.1
CVE-2023-50905	6.1	0%	Feb 29	WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) Affected: through 4.6.1
CVE-2026-65512	5.4	0%	Jul 23	WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 5.6.4
CVE-2023-2261	4.3	1%	Jun 9	WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration Affected: through 4.5.0
CVE-2023-2286	4.3	0%	Jun 9	WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup Affected: through 4.5.0