melapress vulnerabilities

CVEs per yearBy the year they were published

1. 20233
2. 20249
3. 20256
4. 202610

Newest CVEs

• CVE-2026-120075

  WP Activity Log <= 5.6.1 - Unauthenticated Stored Cross-Site Scripting

  melapress · WP Activity Log

  High7.2
• CVE-2026-62142

  WordPress WP 2FA plugin <= 4.1.0 - Cross Site Request Forgery (CSRF) vulnerability

  Melapress · WP 2FA

  High8.8
• CVE-2026-96827

  WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

  Melapress · Admin Notices Manager

  High7.6
• CVE-2026-62085

  WordPress WP Activity Log plugin <= 5.6.6 - SQL Injection vulnerability

  Melapress · WP Activity Log

  High7.6
• CVE-2026-65512

  WordPress WP Activity Log and WP Activity Log Premium plugins <= 5.6.4 - Cross Site Request Forgery (CSRF) vulnerability

  Melapress · WP Activity Log

  Medium5.4
• CVE-2026-56005

  WordPress WP Activity Log plugin <= 5.6.3.1 - Cross Site Scripting (XSS) vulnerability

  Melapress · WP Activity Log

  High7.1
• CVE-2026-54806

  WordPress WP Activity Log plugin <= 5.6.3.1 - PHP Object Injection vulnerability

  Melapress · WP Activity Log

  Critical9.8
• CVE-2026-45435

  WordPress WP Activity Log plugin <= 5.6.3 - Cross Site Scripting (XSS) vulnerability

  Melapress · WP Activity Log

  Medium6.5
• CVE-2026-25331

  WordPress WP Activity Log plugin <= 5.5.4 - Cross Site Scripting (XSS) vulnerability

  Melapress · WP Activity Log

  Medium6.5
• CVE-2025-14866

  Melapress Role Editor <= 1.1.1 - Improper Authorization to Authenticated (Subscriber+) Privilege Escalation via Secondary Role Assignment

  melapress · Melapress Role Editor

  High8.8