Read the docs

Melapress

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9

Exploited now

Melapress records in CISA KEV

No Melapress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Activity Log 5 records MEDIUM Wp 2fa 4 records LOW Melapress File Monitor 3 records MEDIUM Melapress Login Security 3 records MEDIUM

Records

5 records in Wp Activity Log · all components

TI-2024-01878 CVE-2024-2018 · GHSA-87q7-rp2h-q5xw

WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection

Priority MEDIUM 42

The WP Activity Log Premium plugin for WordPress is vulnerable to SQL Injection via the entry->roles parameter in all versions up to, and including, 4.6.4 due to insufficient escaping on the user supplied parameter and l…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00876 Published 2024-04-09 No fix listed CWE-89
TI-2025-00784 CVE-2025-0924 · GHSA-gqj7-345q-xx3j

WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting

Priority MEDIUM 40

The WP Activity Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘message’ parameter in all versions up to, and including, 5.2.2 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01374 Published 2025-02-17 No fix listed CWE-79
Open these records in search →