Login Request a demo
WA
Product
WP Activity Log
by melapress · last CVE Sep 30, 2026
14
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Vulnerabilities14In the news0Timeline
Severity mix
Critical 2High 4Medium 8Low 0
Severity
All severities14Critical2High4Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add WP Activity Log to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-45435
6.5
0%
May 25
WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.6.3
CVE-2026-25331
6.5
0%
Feb 19
WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability
Affected: through 5.5.4
CVE-2025-0924
6.1
1%
Feb 17
WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting
Affected: through 5.2.2
CVE-2024-10793
6.1
1%
Nov 15
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Affected: through 5.2.1
CVE-2023-50905
6.1
0%
Feb 29
WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
Affected: through 4.6.1
CVE-2026-65512
5.4
0%
Jul 23
WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Affected: through 5.6.4
CVE-2023-2261
4.3
1%
Jun 9
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Affected: through 4.5.0
CVE-2023-2286
4.3
0%
Jun 9
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
Affected: through 4.5.0
Showing 8