CVE-2026-65512

MEDIUM5.4

WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Published Jul 23, 2026

Modified 3 weeks ago

Details

Cross-Site request forgery (CSRF) vulnerability in Melapress WP Activity Log and Melapress WP Activity Log Premium allows Cross Site Request Forgery.

This issue affects WP Activity Log: through 5.6.4; WP Activity Log Premium: through 5.6.4.

References

CVSS Analysis

CVSS v3.1

5.4

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

RequiredUI:R

Scope

UnchangedS:U

Impact

Confidentiality

NoneC:N

Integrity

LowI:L

Availability

LowA:L

5.4/CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

Weakness Type (CWE)

Authentication

Ecosystems

Timeline

PublishedJul 23, 2026

ModifiedAug 5, 2026