Skip to content

CVE record · 1 source

CVE-2026-120075

CVSS 7.2

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.6.1 due to insufficient…

Vendor: Melapress
Product: WP Activity Log
CVSS v3.1: 7.2 AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
Weakness: CWE-79
Exposure class: Web platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 23h ago

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.6.1 due to insufficient…

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.6.1 due to insufficient input sanitization and output escaping. This makes it possible for…

CVSS 7.2 CVE-2026-120075 Melapress