Melapress vulnerabilities

Products

• Wp Activity Log 15
• Wp Activity Log 5
• Login Security 4
• Wp 2fa 4
• File Monitor 3
• Login Security 3
• Wp 2fa 3
• Wp 2fa – Two-factor Authentication For Wordpress 3
• Admin Notices Manager 2

Newest

• melapress wp activity log WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting CVE-2026-120075 7.2 HighOctober 31, 2026
• melapress wp 2fa WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-62142 8.8 HighOctober 8, 2026
• melapress admin notices manager WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability CVE-2026-96827 7.6 HighSeptember 30, 2026
• melapress wp activity log WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability CVE-2026-62085 7.6 HighSeptember 30, 2026
• melapress wp activity log, wp activity log premium +1 more WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability CVE-2026-65512 5.4 MediumJuly 23, 2026
• melapress wp activity log WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-56005 7.1 HighJune 25, 2026
• melapress wp activity log WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability CVE-2026-54806 Public exploit 9.8 CriticalJune 17, 2026
• melapress wp activity log WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-45435 6.5 MediumMay 25, 2026
• melapress wp activity log WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability CVE-2026-25331 6.5 MediumFebruary 19, 2026
• melapress role editor Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment CVE-2025-14866 8.8 HighJanuary 23, 2026
• melapress login security MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function CVE-2025-6895 9.8 CriticalJuly 26, 2025
• melapress file monitor, unknown melapress file monitor +1 more WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability CVE-2025-3702 5.4 MediumJuly 3, 2025
• melapress file monitor, unknown melapress file monitor +1 more Website File Changes < 2.1.1 - Authenticated SQL Injection CVE-2024-9879 5.4 MediumMay 15, 2025
• melapress file monitor, unknown melapress file monitor +1 more Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection CVE-2024-10009 4.1 MediumMay 15, 2025
• melapress login security WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability CVE-2025-39565 6.6 MediumApril 16, 2025
• melapress login security, login security premium +1 more MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion CVE-2025-2876 5.3 MediumApril 8, 2025
• melapress wp activity log WP Activity Log 5.3.2 - Insecure deserialization CVE-2025-0767 6.3 MediumFebruary 27, 2025
• melapress wp activity log WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting CVE-2025-0924 Public exploit 7.2 HighFebruary 17, 2025
• melapress wp activity log WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter CVE-2024-10793 Public exploit 7.2 HighNovember 15, 2024
• 5starplugins easy age verify, featured images in rss for mailchimp & more, marijuana age verify +619 more +621 more Freemius SDK <= 2.4.2 - Missing Authorization Checks CVE-2022-4974 6.3 MediumOctober 16, 2024
• wp 2fa WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability CVE-2022-44587 5.3 MediumJune 21, 2024
• melapress login security WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability CVE-2024-35650 4.9 MediumJune 10, 2024
• melapress admin notices manager Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval CVE-2024-1717 4.3 MediumJune 4, 2024
• melapress wp 2fa WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-32568 7.1 HighApril 18, 2024
• melapress wp activity log, wpwhitesecurity wp activity log premium +1 more WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection CVE-2024-2018 8.8 HighApril 9, 2024
• melapress wp 2fa WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability CVE-2022-44595 5.3 MediumMarch 21, 2024
• melapress wp activity log WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-50905 7.1 HighFebruary 29, 2024
• melapress wp 2fa – two-factor authentication for wordpress, wpwhitesecurity wp 2fa +1 more WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending CVE-2023-6506 4.3 MediumJanuary 11, 2024
• melapress wp 2fa – two-factor authentication for wordpress, wp 2fa +1 more WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery CVE-2023-6520 4.3 MediumJanuary 11, 2024
• melapress wp activity log, wpwhitesecurity wp activity log premium +1 more WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration CVE-2023-2261 4.3 MediumJune 9, 2023
• melapress wp activity log, wpwhitesecurity wp activity log premium +1 more WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup CVE-2023-2286 4.3 MediumJune 9, 2023
• melapress wp activity log WP Activity Log <= 4.0.1 - Missing Authorization CVE-2020-36716 7.3 HighJune 7, 2023
• wpwhitesecurity wp 2fa, melapress wp 2fa – two-factor authentication for wordpress +1 more WP 2FA < 2.2.1 - Reflected Cross-Site Scripting CVE-2022-1527 6.1 MediumMay 30, 2022