CVE-2025-0767

6.3 mediumEPSS 0.5%

Medium (6.3) in melapress wp activity log. EPSS 0.5% chance of exploitation in the next 30 days.

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.

Severity

CVSS 4.0

6.3 medium

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 40% of CVEs (scores of 2026-10-31)
CWE: CWE-502
Published: 2025-02-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

melapress:wp_activity_log

References

https://co.wordpress.org/plugins/wp-security-audit-log/
https://fluidattacks.com/advisories/skims-9/

Check your stack JSON