CVE-2026-84759

Unauthenticated Cross Site Request Forgery (CSRF) in Activity Log <= 2.13.1 versions.

Published Sep 2, 2026
CVSS 7.1 high
0.1% chance of exploitation in the next 30 days (EPSS)

Affected software

Elementor Activity Log

CVE-2026-84759 at the National Vulnerability Database