Medium
CVE-2026-62085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filters
Medium
CVE-2026-65512
WP Activity Log <= 5.6.4 - Cross-Site Request Forgery
Medium
CVE-2026-56005
WP Activity Log <= 5.6.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2026-54806
WP Activity Log <= 5.6.3.1 - Unauthenticated PHP Object Injection
Medium
CVE-2026-45435
WP Activity Log <= 5.6.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2026-25331
Activity Log <= 5.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-0767
WP Activity Log <= 5.3.2 - Authenticated (Admin+) PHP Object Injection
High
CVE-2025-0924
WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2024-10793
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
High
CVE-2024-2018
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-50905
WP Activity Log <= 4.6.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-33999
Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get
Medium
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Medium
CVE-2023-2286
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
Medium
CVE-2023-2284
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
Medium
CVE-2023-2285
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
Medium
CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
Critical
ea00bcc9-6f9c-4704-8337-074d5356e9e2
WP Activity Log <= 4.1.4 - SQL Injection
High
CVE-2020-36716
WP Activity Log <= 4.0.1 - Missing Authorization
High
3fda31fa-efc9-44b9-99ba-9e3e23aa2ee0
Freemius SDK <= 2.2.3 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2018-8719
WP Security Audit Log <= 3.1.1 - Sensitive Information Disclosure
High
6173d307-9917-4d76-b6bf-d5646b9e33d6
WP Activity Log 1.5 - 2.4.3 - Reflected Cross-Site Scripting
High
CVE-2014-5072
WP Activity Log <= 1.2.4 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.