Skip to content
Noroxi

WP Activity Log

wp-security-audit-log · plugin

Known security vulnerabilities for WP Activity Log. Find out in seconds which version runs on your site with WP Lens.

14 known vulnerabilities

1 critical · 3 with public exploit code · latest Sep 30, 2026

Vulnerabilities

  • CVE-2026-54806

    WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

    Critical 9.8

  • CVE-2026-62085

    WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

    High 7.6

  • CVE-2026-56005

    WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability

    High 7.1

  • CVE-2026-45435

    WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2026-25331

    WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

    Medium 6.5

  • CVE-2025-0767

    WP Activity Log 5.3.2 - Insecure deserialization

    Medium 6.3

  • CVE-2025-0924

    WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting

    Medium 6.1

  • CVE-2024-10793

    WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter

    Medium 6.1

  • CVE-2023-50905

    WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

    Medium 6.1

  • CVE-2026-65512

    WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

    Medium 5.4

  • CVE-2023-2286

    WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup

    Medium 4.3

  • CVE-2023-2285

    WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db

    Medium 4.3

  • CVE-2023-2284

    WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db

    Medium 4.3

  • CVE-2023-2261

    WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration

    Medium 4.3

← Back to directory