Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-0767

WP Activity Log 5.3.2 - Insecure deserialization

Description

WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-csv-writer.php.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Melapress WP Activity Log

Default version status: unaffected

  • 5.3.2affected

References