Vulnerabilities in Melapress
31 resultsCVE-2026-96827HIGHWordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-3702MEDIUMWordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-56005HIGHWordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-6520MEDIUMWP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request ForgeryEPSS 0.2%CVE-2026-120075HIGHWP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-109899HIGHWordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-45435MEDIUMWordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25331MEDIUMWordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65512MEDIUMWordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-62142HIGHWordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-121573MEDIUMWordPress WP Activity Log plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerabilityEPSS —