WP Activity Log, CVE-2026-45435

CVE, Research URL: CVE-2026-45435
Home page URL: Security reports for WP Activity Log
Application: WP Activity Log
Published on: May 25, 2026
Research Description: WP Activity Log [wp-security-audit-log] < 5.6.3.1 CVE-2026-45435 [en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows DOM-Based XSS. This issue affects WP Activity Log: from n/a through 5.6.3.
Affected versions: max 5.6.3.1.
Status: vulnerable