🔍 What is Wp Activity Log?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2025-0767

CRITICAL CVSS 9.8 Feb 27, 2025

CVE-2025-0767 is a PHP object injection vulnerability in WP Activity Log plugin that allows remote code execution. Attackers can exploit unvalidated user input passed to unserialize() to execute arbit...

CVE-2024-10793

HIGH CVSS 7.2 Nov 15, 2024

The WP Activity Log plugin for WordPress has a stored XSS vulnerability that allows unauthenticated attackers to inject malicious scripts via the user_id parameter. These scripts execute when administ...

CVE-2023-50905

HIGH CVSS 7.1 Feb 29, 2024

This stored cross-site scripting (XSS) vulnerability in the WP Activity Log WordPress plugin allows attackers to inject malicious scripts into web pages that are then executed when viewed by other use...