Melapress

Records32All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high16CVSS 7.0–8.9

Exploited now

Melapress records in CISA KEV

No Melapress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Activity Log 5 records MEDIUM Wp 2fa 4 records LOW Melapress File Monitor 3 records MEDIUM Melapress Login Security 3 records MEDIUM

Records

4 records in Wp 2fa · all components

TI-2022-21924 CVE-2022-44587 · GHSA-2w67-mwp7-3283

WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability

LOW 39

Insertion of Sensitive Information into Log File vulnerability in WP 2FA allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP 2FA: from n/a through 2.6.3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00441 Published 2024-06-21 No fix listed CWE-532

TI-2024-21455 CVE-2024-32568 · GHSA-w37p-9fqc-g3gp

WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue affects WP 2FA: from n/a through <= 2.6.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00409 Published 2024-04-18 No fix listed CWE-79

TI-2022-21931 CVE-2022-44595 · GHSA-cg72-65f8-rpjf

WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability

LOW 27

Improper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00484 Published 2024-03-21 No fix listed CWE-287

TI-2023-05976 CVE-2023-6520 · GHSA-r4h6-6pm7-9q3g

WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery

LOW 20

The WP 2FA – Two-factor authentication for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.5.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00246 Published 2024-01-11 No fix listed CWE-352

Open these records in search →

Critical	2
High	16
Medium	14
Low	0
No CVSS	0