What’s Vulnerable › Products

MelaPress Login Security vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your MelaPress Login Security version is affected

Latest MelaPress Login Security vulnerabilities

• CVE-2025-6895 — MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function (CVSS 9.8)
• CVE-2025-39565 — WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability (CVSS 7.2)
• CVE-2025-2876 — MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion (CVSS 8.2)
• CVE-2024-35650 — WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability (CVSS 7.2)