PatchTheCVEmelapress vulnerabilities
Recent CVEs affecting melapress products. 8 tracked.
melapress has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 7. Most recent: 2025-07-03. Highest priority: CVE-2025-0767 (score 49/100).
- CVE-2025-3702 MEDIUM 5.4 UPGRADE Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Ex
- CVE-2025-39565 MEDIUM 6.6 UPGRADE Deserialization of Untrusted Data vulnerability in Melapress MelaPress Login Security melapress-login-security
- CVE-2025-2876 MEDIUM 5.3 UPGRADE The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unaut
- CVE-2025-0924 HIGH 7.2 UPGRADE The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parame
- CVE-2025-0767 CRITICAL 9.8 DOWNGRADE WP Activity Log 5.3.2 was found to be vulnerable
- CVE-2024-9879 MEDIUM 5.4 UPGRADE The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using
- CVE-2024-10793 HIGH 7.2 UPGRADE The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the user_id paramete
- CVE-2024-10009 MEDIUM 4.1 UPGRADE The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using
FAQ
How do I fix melapress vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is melapress being exploited right now?
None of the tracked melapress CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which melapress CVE should I patch first?
CVE-2025-0767 currently ranks highest (49/100): WP Activity Log 5.3.2 was found to be vulnerable.