CVE-2026-65512mediumCWE-352

CVE-2026-65512: falha de média gravidade em Melapress WP Activity Log

WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar WP Activity Log+ Monitorar WP Activity Log Premium

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.4epss 0.1%
Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery. This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
Produtos afetados
Melapress · WP Activity LogMelapress · WP Activity Log Premium
CVEs relacionadas — Melapress WP Activity Log

No mesmo produto, das mais perigosas para as menos.

CVE-2026-54806CRITICALWordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerabilityEPSS 0.7%CVE-2025-0767MEDIUMWP Activity Log 5.3.2 - Insecure deserializationEPSS 0.5%CVE-2023-50905HIGHWordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)EPSS 0.3%CVE-2026-62085HIGHWordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerabilityEPSS 0.3%CVE-2026-56005HIGHWordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2026-45435MEDIUMWordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%