WP Activity Log

Güvenlik açıkları

• CVE-2026-54806kimlik doğrulamasız≤ 5.6.3.1

  WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

  Kritik 9.8

• CVE-2026-62085yönetici≤ 5.6.6

  WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

  Yüksek 7.6

• CVE-2026-56005kimlik doğrulamasız · tıklama gerekir≤ 5.6.3.1

  WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability

  Yüksek 7.1

• CVE-2026-45435giriş gerekir≤ 5.6.3

  WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2026-25331giriş gerekir≤ 5.5.4

  WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

  Orta 6.5

• CVE-2025-0767kimlik doğrulamasız

  WP Activity Log 5.3.2 - Insecure deserialization

  Orta 6.3

• CVE-2025-0924kimlik doğrulamasız≤ 5.2.2

  WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting

  Orta 6.1

• CVE-2024-10793kimlik doğrulamasız≤ 5.2.1

  WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter

  Orta 6.1

• CVE-2023-50905kimlik doğrulamasız · tıklama gerekir≤ 4.6.1

  WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)

  Orta 6.1

• CVE-2026-65512kimlik doğrulamasız · tıklama gerekir

  WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

  Orta 5.4

• CVE-2023-2286kimlik doğrulamasız · tıklama gerekir≤ 4.5.0

  WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup

  Orta 4.3

• CVE-2023-2285kimlik doğrulamasız≤ 4.5.0

  WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db

  Orta 4.3

• CVE-2023-2284giriş gerekir≤ 4.5.0

  WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db

  Orta 4.3

• CVE-2023-2261abone+≤ 4.5.0

  WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration

  Orta 4.3