Veille CVE

Recherche « Melapress WP Activity Log »

5 CVE

  1. CVE-2026-62085 7.6 Élevée

    Melapress WP Activity Log

    Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.

  2. CVE-2026-65512 5.4 Moyenne

    Melapress WP Activity Log · Melapress WP Activity Log Premium

    Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4.

  3. CVE-2026-56005 7.1 Élevée

    Melapress WP Activity Log

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.3.1.

  4. CVE-2026-54806 9.8 Critique

    Melapress WP Activity Log

    Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.

  5. CVE-2026-45435 6.5 Moyenne

    Melapress WP Activity Log

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a through 5.6.3.