VendorsMelapresswp_activity_logall versions
Vulnerabilities

Melapress WP Activity Log

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2025-0767
WP Activity Log 5.3.2 - Insecure deserialization
Published 2025-02-27 · Analyzed
9.8EPSS 0.005
CVE-2024-2018
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
Published 2024-04-09 · Modified
8.8EPSS 0.009
CVE-2025-0924
WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting
Published 2025-02-17 · Analyzed
7.2EPSS 0.014
CVE-2024-10793
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
Published 2024-11-15 · Analyzed
7.2EPSS 0.014
CVE-2023-50905
WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
Published 2024-02-29 · Modified
7.1EPSS 0.003