WP Activity Log — Vulnerabilities & Security Advisories 13

All 13 CVE vulnerabilities found in WP Activity Log, with AI-generated Chinese analysis, references, and POCs.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-62085	WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability CWE-89	7.6	High	2026-09-30
CVE-2026-65512	WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability CWE-352	5.4	Medium	2026-07-23
CVE-2026-56005	WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability CWE-79	7.1	High	2026-06-25
CVE-2026-54806	WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability CWE-502	9.8	Critical	2026-06-17
CVE-2026-45435	WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2026-05-25
CVE-2026-25331	WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2026-02-19
CVE-2025-0767	WP Activity Log 5.3.2 - Insecure deserialization CWE-502	9.8	-	2025-02-27
CVE-2025-0924	WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting CWE-79	7.2	High	2025-02-17
CVE-2024-10793	WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter CWE-79	7.2	High	2024-11-15
CVE-2023-50905	WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) CWE-79	7.1	High	2024-02-29
CVE-2023-2286	WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup CWE-352	4.3	Medium	2023-06-09
CVE-2023-2261	WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration CWE-862	4.3	Medium	2023-06-09
CVE-2020-36716	WP Activity Log <= 4.0.1 - Missing Authorization CWE-862	7.3	High	2023-06-07

All 13 known CVE vulnerabilities affecting WP Activity Log with full Chinese analysis, references, and POCs where available.