critical9.8
CVE-2025-0767
WP Activity Log 5.3.2 was found to be vulnerable.
Impact
WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Melapress | Wp Activity Log | Version 5.3.2 |