Extension WordPress
Vulnérabilités Melapress Login Security
Cette page rassemble les failles publiées pour Melapress Login Security, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Melapress Login Security
4 fiches
MelaPress Login Security 2.1.0 – 2.1.1 – Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function
The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token() function in versions 2.1.0 to 2.1.1. This makes it possible for unauthenticated attackers who know an arbitrary user meta…
2.1.0-2.1.1
2.2.0
25/07/2025
MelaPress Login Security <= 2.1.0 – Authenticated (Administrator+) PHP Object Injection
The MelaPress Login Security plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.0 via deserialization of untrusted input. This makes it possible for authenticated attackers, with administrator-level access and above, to…
*-2.1.0
2.1.1
16/04/2025
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 – Missing Authorization to Unauthenticated Arbitrary User Deletion
The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated…
2.1.0
2.1.1
07/04/2025
MelaPress Login Security <= 1.3.0 – Authenticated (Admin+) Remote File Inclusion
The MelaPress Login Security plugin for WordPress is vulnerable to Remote File Inclusion in all versions up to, and including, 1.3.0 via the 'tab' parameter. This makes it possible for authenticated attackers, with Administrator-level access and above, to…
*-1.3.0
1.3.1
03/06/2024
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.