wp-security-audit-log vulnerabilities
CVEs whose affected-version data names the wp-security-audit-log package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-62085High· 7.6Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.
Administrator SQL Injection in WP Activity Log <= 5.6.6 versions.
▾ TwilightMelapress · wp-security-audit-logEPSS 0.31%via NVD
CVE-2026-56005High· 7.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.3.1.
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log wp-security-audit-log allows Stored XSS.This issue affects WP Activity Log: from n/a through 5.6.3.1.
▾ TwilightMelapress · wp-security-audit-logEPSS 0.25%via NVD