Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Melapress Component: Melapress File Monitor Clear all filters
TI-2025-03261 CVE-2025-3702 · GHSA-39j6-jjvv-95wr

WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability

Priority LOW 24

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00266 Published 2025-07-03 No fix listed CWE-862
TI-2024-09166 CVE-2024-9879 · GHSA-8rgg-p4jx-9xw2

Website File Changes < 2.1.1 - Authenticated SQL Injection

Priority MEDIUM 60

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0034 Published 2025-05-15 Fixed in 2.1.1 CWE-89
TI-2024-09289 CVE-2024-10009 · GHSA-5gjw-c85q-72c7

Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection

Priority MEDIUM 52

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks

CVSS 3.1MEDIUM 4.1 Network High privileges No interaction EPSS 0.00418 Published 2025-05-15 Fixed in 2.1.0 CWE-89