melapress vulnerabilities
31 published CVEs name melapress among the affected products.
- 31Published CVEs31 of them scored
- 13Last 12 monthspublished in the last year
- 3Critical12 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-121573
WordPress WP Activity Log plugin <= 5.6.7 - Cross Site Scripting (XSS) vulnerability
Melapress · WP Activity Log
Medium6.5 - CVE-2026-109900
WordPress Melapress Role Editor plugin <= 1.3.0 - Privilege Escalation vulnerability
Melapress · Melapress Role Editor
Critical9.6 - CVE-2026-109899
WordPress Melapress Role Editor plugin <= 1.3.0 - Broken Access Control vulnerability
Melapress · Melapress Role Editor
High7.1 - CVE-2026-120075
WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting
melapress · WP Activity Log
High7.2 - CVE-2026-62142
WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability
Melapress · WP 2FA
High8.8 - CVE-2026-96827
WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability
Melapress · Admin Notices Manager
High7.6 - CVE-2026-62085
WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability
Melapress · WP Activity Log
High7.6 - CVE-2026-65512
WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Melapress · WP Activity Log
Medium5.4 - CVE-2026-56005
WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability
Melapress · WP Activity Log
High7.1 - CVE-2026-54806
WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability
Melapress · WP Activity Log
Critical9.8