Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1325 CNY

100%
Buy Us a Coffee

WP Activity Log — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in WP Activity Log, with AI-generated Chinese analysis, references, and POCs.

Vendor: melapress

CVE IDTitleCVSSSeverityPublished
CVE-2026-54806 WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability CWE-502 9.8 Critical2026-06-17
CVE-2026-45435 WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-05-25
CVE-2026-25331 WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium2026-02-19
CVE-2025-0767 WP Activity Log 5.3.2 - Insecure deserialization CWE-502 9.8 -2025-02-27
CVE-2025-0924 WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting CWE-79 7.2 High2025-02-17
CVE-2024-10793 WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter CWE-79 7.2 High2024-11-15
CVE-2023-50905 WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High2024-02-29
CVE-2023-2286 WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup CWE-352 4.3 Medium2023-06-09
CVE-2023-2261 WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration CWE-862 4.3 Medium2023-06-09
CVE-2020-36716 WP Activity Log <= 4.0.1 - Missing Authorization CWE-862 7.3 High2023-06-07

All 10 known CVE vulnerabilities affecting WP Activity Log with full Chinese analysis, references, and POCs where available.