Known vulnerabilities in WP Activity Log
The #1 user-rated activity log plugin for event logging, activity monitoring and change tracking.
15Reported vulnerabilities
9.8Highest CVSS score
5.6.5Latest version
300,000+Active installs
What to do now
Update WP Activity Log to 5.6.5 or later.
15 of these have a fixed version available. Updating resolves them.
Reported vulnerabilities
| CVE | Severity | Exploit probability |
Affected versions | Fixed in | Published |
|---|---|---|---|---|---|
| CVE-2018-8719 | Medium | 15.9% | 3.1.1 to 3.1.1 (inclusive) | 3.1.2 |
April 4, 2018 |
| WF-ea00bcc9-6f9c-4704-8337-074d5356e9e2 | Critical | — | Before 4.1.5 | 4.1.5 |
November 4, 2020 |
| CVE-2014-5072 | High | 0.9% | Before 1.2.5 | 1.2.5 |
April 6, 2018 |
| CVE-2026-54806 | High | 0.7% | 5.6.3.1 and earlier | 5.6.4 |
June 16, 2026 |
| WF-6173d307-9917-4d76-b6bf-d5646b9e33d6 | High | — | 1.5 to 2.4.3 (inclusive) | 2.4.4 |
June 27, 2016 |
| CVE-2025-0767 | Medium | 0.5% | 5.3.2 and earlier | 5.3.3 |
February 27, 2025 |
| CVE-2026-56005 | Medium | 0.3% | 5.6.3.1 and earlier | 5.6.4 |
June 19, 2026 |
| CVE-2025-0924 | Medium | 1.3% | Before 5.3.0 | 5.3.0 |
February 17, 2025 |
| CVE-2024-10793 | Medium | 1.4% | Before 5.2.2 | 5.2.2 |
November 15, 2024 |
| CVE-2026-45435 | Medium | 0.2% | 5.6.3 and earlier | 5.6.3.1 |
May 19, 2026 |
| CVE-2026-25331 | Medium | 0.2% | 5.5.4 and earlier | 5.6.0 |
February 14, 2026 |
| CVE-2023-50905 | Medium | 0.3% | 4.6.1 and earlier | 4.6.2 |
February 14, 2024 |
| CVE-2023-2261 | Medium | 0.6% | 4.5.0 and earlier | 4.5.2 |
June 9, 2023 |
| CVE-2026-65512 | Medium | 0.1% | 5.6.4 and earlier | 5.6.5 |
July 23, 2026 |
| CVE-2023-2286 | Medium | 0.3% | 4.5.0 and earlier | 4.5.2 |
June 9, 2023 |