VULNERABILITY INTELLIGENCE

CVE-2026-24987

CVSS score6.5 MEDIUM

EPSS probability0.38%

CISA KEVNot currently listed

Published2026-03-25

Last modified2026-06-17

Description

Missing Authorization vulnerability in activity-log.com WP System Log winterlock allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP System Log: from n/a through <= 1.2.7.