Browse CVEs

MEDIUM 5.4 CVE-2025-3702 Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access … Melapress File Monitor 2.2.0+ Fix from $1,6002025-07-03 MEDIUM 5.4 CVE-2024-9879 The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins… Melapress File Monitor 2.1.1+ Fix from $1,6002025-05-15 HIGH 7.2 CVE-2025-39565 Deserialization of Untrusted Data vulnerability in Melapress MelaPress Login Security melapress-login-security allows Object Injection.This issue aff… Melapress Login Security 2.1.1+ Fix from $1,9502025-04-16 HIGH 8.2 CVE-2025-2876 The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing c… Melapress Login Security 2.1.1+ Fix from $1,9502025-04-08 CRITICAL 9.8 CVE-2025-0767 WP Activity Log 5.3.2 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/classes/Writers/class-c… Wp Activity Log Mitigation only Fix from $2,3002025-02-27 MEDIUM 6.1 CVE-2025-0924 The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and includin… Wp Activity Log 5.3.0+ Fix from $1,6002025-02-17 MEDIUM 6.1 CVE-2024-10793 The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id parameter in all versions up to, and including,… Wp Activity Log 5.2.2+ Fix from $1,6002024-11-15 HIGH 7.5 CVE-2022-44587 Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue a… Wp 2fa 2.6.4+ Fix from $1,9502024-06-21 HIGH 7.2 CVE-2024-35650 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Melapress MelaPress Login Se… Melapress Login Security 1.3.1+ Fix from $1,9502024-06-10 MEDIUM 6.1 CVE-2024-32568 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue affects WP 2… Wp 2fa 2.6.3+ Fix from $1,6002024-04-18 HIGH 8.8 CVE-2024-2018 The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all versions up to, and including, … Wp Activity Log 4.6.4.1+ Fix from $1,9502024-04-09 MEDIUM 5.3 CVE-2022-44595 Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0. Wp 2fa after 2.2.0 Fix from $1,6002024-03-21 MEDIUM 6.1 CVE-2023-50905 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP Activity Log allows Stored XSS.Thi… Wp Activity Log 4.6.2+ Fix from $1,6002024-02-29