All packages
WP Activity Log vulnerabilities
3 known CVE vulnerabilities in WP Activity Log, translated and rated.
- CVE-2026-56005High
The WP Activity Log plugin versions up to 5.6.3.1 contain a Cross Site Scripting (XSS) vulnerability that can be exploited by subscribers.
- CVE-2026-54806Critical
The WP Activity Log plugin versions up to 5.6.3.1 are vulnerable to unauthenticated PHP object injection.
- CVE-2026-45435Medium
The WP Activity Log plugin up to version 5.6.3 is vulnerable to DOM-based XSS due to improper input neutralization during page generation.