Vulnerabilidades em melapress
30 resultadosAnálise Vexday
Melapress apresenta 12 vulnerabilidades catalogadas, mas nenhuma sob exploração ativa conhecida e nenhuma publicação recente. Uma vulnerabilidade crítica foi identificada, com a fraqueza dominante relacionada a controle de acesso (CWE-862), indicando risco moderado concentrado em autorização inadequada. O cenário de ameaça atual é reduzido, mas a natureza do déficit de acesso recomenda revisão dos mecanismos de permissão.
CVE-2025-3702MEDIUMWordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerabilityEPSS 0.3%CVE-2026-56005HIGHWordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2023-6520MEDIUMWP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request ForgeryEPSS 0.2%CVE-2026-120075HIGHWP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-45435MEDIUMWordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25331MEDIUMWordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-65512MEDIUMWordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-62142HIGHWordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%CVE-2026-109900CRITICALWordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerabilityEPSS —CVE-2026-109899HIGHWordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerabilityEPSS —