Login Request a demo
ME
Vendor
Melapress
8 products with CVEs on record
27
CVEs
0
On KEV
3
New 30D
Products
WA
WP Activity Log
Melapress
9.8
11 CVEs0 on KEV1 new
W2
WP 2FA
Melapress
8.8
5 CVEs0 on KEV1 new
AN
Admin Notices Manager
Melapress
7.6
1 CVEs0 on KEV1 new
ML
Melapress Login Security
melapress
9.8
4 CVEs0 on KEV0 new
MF
Melapress File Monitor
Melapress
5.4
3 CVEs0 on KEV0 new
ML
MelaPress Login Security Premium
melapress
8.2
1 CVEs0 on KEV0 new
MR
Melapress Role Editor
melapress
8.8
1 CVEs0 on KEV0 new
WA
WP Activity Log Premium
Melapress
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-62142
W2
WP 2FA
Melapress
8.8
0%
Oct 8WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-96827
AN
Admin Notices Manager
Melapress
7.6
0%
Sep 30WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability
CVE-2026-62085
WA
WP Activity Log
Melapress
7.6
0%
Sep 30WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability
CVE-2026-65512
WA
WP Activity Log Premium
Melapress
5.4
0%
Jul 23WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-56005
WA
WP Activity Log
Melapress
7.1
0%
Jun 25WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-54806
WA
WP Activity Log
Melapress
9.8
1%
Jun 17WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability
CVE-2026-45435
WA
WP Activity Log
Melapress
6.5
0%
May 25WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-25331
WA
WP Activity Log
Melapress
6.5
0%
Feb 19WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability
CVE-2025-14866
MR
Melapress Role Editor
melapress
8.8
0%
Jan 23Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment
CVE-2025-6895
ML
Melapress Login Security
melapress
9.8
1%
Jul 26MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function
CVE-2025-3702
MF
Melapress File Monitor
Melapress
5.4
0%
Jul 3WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability
CVE-2024-9879
MF
Melapress File Monitor
Melapress
5.4
0%
May 15Website File Changes < 2.1.1 - Authenticated SQL Injection
CVE-2024-10009
MF
Melapress File Monitor
Melapress
4.1
0%
May 15Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection
CVE-2025-39565
ML
MelaPress Login Security
Melapress
7.2
1%
Apr 16WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability
CVE-2025-2876
ML
MelaPress Login Security
melapress
8.2
0%
Apr 8MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
CVE-2025-0767
WA
WP Activity Log
Melapress
9.8
0%
Feb 27WP Activity Log 5.3.2 - Insecure deserialization
CVE-2025-0924
WA
WP Activity Log
Melapress
6.1
1%
Feb 17The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient…
CVE-2024-10793
WA
WP Activity Log
Melapress
6.1
1%
Nov 15The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including, 5.2.1 due to insufficient…
CVE-2022-44587
W2
WP 2fa
Melapress
7.5
0%
Jun 21Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a…
CVE-2024-35650
ML
Melapress Login Security
Melapress
7.2
1%
Jun 10Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Melapress MelaPress Login Security…
CVE-2024-32568
W2
WP 2fa
Melapress
6.1
0%
Apr 18Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue affects WP 2FA: from n/a through <= 2.6.2
CVE-2024-2018
WA
WP Activity Log
Melapress
8.8
1%
Apr 9The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all versions up to, and including, 4.6.4 due to insufficient…
CVE-2022-44595
W2
WP 2fa
Melapress
5.3
0%
Mar 21Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0
CVE-2023-50905
WA
WP Activity Log
Melapress
6.1
0%
Feb 29Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows Stored XSS.This issue affects WP Activity…
CVE-2023-6520
W2
WP 2fa
Melapress
4.3
0%
Jan 11The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0