PT-2026-63928 · Melapress+1 · Wp Activity Log+2
CVE-2026-65512
·
Published
2026-07-23
·
Updated
2026-08-05
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
WP Activity Log versions prior to 5.6.5
WP Activity Log Premium versions prior to 5.6.5
Description
Cross-Site Request Forgery (CSRF) occurs when an attacker tricks a victim into performing an action they did not intend to do. This issue is caused by missing or incorrect nonce validation on a function, allowing unauthenticated attackers to execute unauthorized actions by tricking a site administrator into clicking a malicious link.
Recommendations
Update WP Activity Log to version 5.6.5 or later.
Update WP Activity Log Premium to version 5.6.5 or later.
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wp Activity Log
Wp Activity Log Premium
Wp Security Audit Log