Skip to content
OpenAdvisories

Vendor

melapress

30 known vulnerabilities.

Products

WP Activity Log 15 MelaPress Login Security 4 WP 2FA 3 Melapress Role Editor 3 Admin Notices Manager 2 WP 2FA – Two-factor authentication for WordPress 2 MelaPress Login Security Premium 1 Melapress File Monitor 1 WP Activity Log Premium 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-109900

    WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability

    Incorrect Privilege Assignment vulnerability in Melapress Melapress Role Editor melapress-role-editor allows Privilege Escalation.This issue affects Melapress Role Editor: from n/a through 1.3.0.

    melapress Melapress Role Editor
  • Critical 9.8
    CVE-2026-54806 Public exploit

    WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

    Unauthenticated PHP Object Injection in WP Activity Log <= 5.6.3.1 versions.

    melapress WP Activity Log
  • Critical 9.8
    CVE-2025-6895

    MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function

    The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token() function in versions 2.1.0 to 2.1.1. This makes it possible for unauthenticated attackers who know…

    melapress MelaPress Login Security Web / CMS