Wp Activity Log

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-0767 MEDIUM This Month

WP Activity Log 5.3.2 was found to be vulnerable. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

PHP Deserialization Wp Activity Log

NVD

CVSS 4.0

6.3

EPSS

0.2%

CVE-2025-0924 HIGH PATCH This Week

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Wp Activity Log PHP

NVD

CVSS 3.1

7.2

EPSS

3.3%

CVE-2025-0767

EPSS 0% CVSS 6.3

MEDIUM This Month

WP Activity Log 5.3.2 was found to be vulnerable. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

PHP Deserialization Wp Activity Log

NVD

CVE-2025-0924

EPSS 3% CVSS 7.2

HIGH PATCH This Week

WordPress XSS Wp Activity Log +1

NVD