<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: melapress file monitor</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2025-3702: Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Ex</title><link>https://patchthecve.com/cve/CVE-2025-3702.html</link><guid>https://patchthecve.com/cve/CVE-2025-3702.html</guid><pubDate>Wed, 17 Jun 2026 09:20:30 +0000</pubDate><description>MEDIUM 5.4: Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through &lt; 2.2.0.</description></item><item><title>CVE-2024-9879: The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using</title><link>https://patchthecve.com/cve/CVE-2024-9879.html</link><guid>https://patchthecve.com/cve/CVE-2024-9879.html</guid><pubDate>Wed, 17 Jun 2026 08:25:25 +0000</pubDate><description>MEDIUM 5.4: The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks</description></item><item><title>CVE-2024-10009: The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using</title><link>https://patchthecve.com/cve/CVE-2024-10009.html</link><guid>https://patchthecve.com/cve/CVE-2024-10009.html</guid><pubDate>Wed, 17 Jun 2026 06:54:45 +0000</pubDate><description>MEDIUM 4.1: The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks</description></item></channel></rss>