ME
Vendor
melapress
33
CVEs
0
On KEV
3
New 30D
Products
WA9.8
WP Activity Log
melapress
14 CVEs0 on KEV1 new
W28.8
WP 2FA
Melapress
5 CVEs0 on KEV1 new
AN7.6
Admin Notices Manager
melapress
2 CVEs0 on KEV1 new
ML9.8
Melapress Login Security
melapress
4 CVEs0 on KEV0 new
MF5.4
Melapress File Monitor
Melapress
3 CVEs0 on KEV0 new
W24.3
WP 2FA – Two-factor authentication for WordPress
melapress
2 CVEs0 on KEV0 new
ML8.2
MelaPress Login Security Premium
melapress
1 CVEs0 on KEV0 new
MR8.8
Melapress Role Editor
melapress
1 CVEs0 on KEV0 new
WA5.4
WP Activity Log Premium
Melapress
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-62142 | W2 WP 2FA Melapress | 8.8 | Oct 8 | WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-96827 | AN Admin Notices Manager Melapress | 7.6 | Sep 30 | WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability |
| CVE-2026-62085 | WA WP Activity Log Melapress | 7.6 | Sep 30 | WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability |
| CVE-2026-65512 | WA WP Activity Log Melapress | 5.4 | Jul 23 | WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2026-56005 | WA WP Activity Log Melapress | 7.1 | Jun 25 | WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-54806 | WA WP Activity Log Melapress | 9.8 | Jun 17 | WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability |
| CVE-2026-45435 | WA WP Activity Log Melapress | 6.5 | May 25 | WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability |
| CVE-2026-25331 | WA WP Activity Log Melapress | 6.5 | Feb 19 | WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-14866 | MR Melapress Role Editor melapress | 8.8 | Jan 23 | Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment |
| CVE-2025-6895 | ML Melapress Login Security melapress | 9.8 | Jul 26 | MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function |
| CVE-2025-3702 | MF Melapress File Monitor Melapress | 5.4 | Jul 3 | WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability |
| CVE-2024-9879 | MF Melapress File Monitor Melapress | 5.4 | May 15 | Website File Changes < 2.1.1 - Authenticated SQL Injection |
| CVE-2024-10009 | MF Melapress File Monitor Melapress | 4.1 | May 15 | Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection |
| CVE-2025-39565 | ML MelaPress Login Security Melapress | 7.2 | Apr 16 | WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability |
| CVE-2025-2876 | ML MelaPress Login Security melapress | 8.2 | Apr 8 | MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion |
| CVE-2025-0767 | WA WP Activity Log Melapress | 9.8 | Feb 27 | WP Activity Log 5.3.2 - Insecure deserialization |
| CVE-2025-0924 | WA WP Activity Log melapress | 6.1 | Feb 17 | WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2024-10793 | WA WP Activity Log melapress | 6.1 | Nov 15 | WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter |
| CVE-2022-44587 | W2 WP 2fa Melapress | 7.5 | Jun 21 | WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability |
| CVE-2024-35650 | ML MelaPress Login Security Melapress | 7.2 | Jun 10 | WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability |
| CVE-2024-1717 | AN Admin Notices Manager melapress | 4.3 | Jun 4 | Admin Notices Manager <= 1.4.0 - Missing Authorization to Authenticated (Subscriber+) User Email Retrieval |
| CVE-2024-32568 | W2 WP 2FA Melapress | 6.1 | Apr 18 | WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2024-2018 | WA WP Activity Log Melapress | 8.8 | Apr 9 | WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection |
| CVE-2022-44595 | W2 WP 2FA Melapress | 5.3 | Mar 21 | WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability |
| CVE-2023-50905 | WA WP Activity Log Melapress | 6.1 | Feb 29 | WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS) |
| CVE-2023-6506 | W2 WP 2FA – Two-factor authentication for WordPress melapress | 4.3 | Jan 11 | WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending |
| CVE-2023-6520 | W2 WP 2FA – Two-factor authentication for WordPress melapress | 4.3 | Jan 11 | WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery |
| CVE-2023-2261 | WA WP Activity Log melapress | 4.3 | Jun 9 | WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration |
| CVE-2023-2286 | WA WP Activity Log melapress | 4.3 | Jun 9 | WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup |
| CVE-2020-36716 | WA WP Activity Log melapress | 7.3 | Jun 7 | WP Activity Log <= 4.0.1 - Missing Authorization |