melapress kayıtları
melapress üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %60
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-862 Missing Authorization2
- CWE-502 Deserialization of Untrusted Data2
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
- CWE-352 Cross-Site Request Forgery (CSRF)1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2024-2018İstismar yok | WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injectionmelapress · wp activity log · CWE-89 | Yüksek8,8 | — | %0,9 | 9 Nis 2024 |
32İzleyin | CVE-2025-2876İstismar yok | MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletionmelapress · melapress login security · CWE-862 | Yüksek8,2 | — | %0,4 | 8 Nis 2025 |
30İzleyin | CVE-2022-44587İstismar yok | WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerabilitymelapress · wp 2fa · CWE-532 | Yüksek7,5 | — | %0,4 | 21 Haz 2024 |
28İzleyin | CVE-2025-39565İstismar yok | WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerabilitymelapress · melapress login security · CWE-502 | Yüksek7,2 | — | %0,9 | 16 Nis 2025 |
28İzleyin | CVE-2024-35650İstismar yok | WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerabilitymelapress · melapress login security · CWE-98 | Yüksek7,2 | — | %0,6 | 10 Haz 2024 |
25İzleyin | CVE-2025-0767İstismar yok | WP Activity Log 5.3.2 - Insecure deserializationmelapress · wp activity log · CWE-502 | Orta6,3 | — | %0,5 | 27 Şub 2025 |
24İzleyin | CVE-2025-0924Kavram kanıtı | WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scriptingmelapress · wp activity log · CWE-79 | Orta6,1 | — | %1,4 | 17 Şub 2025 |
24İzleyin | CVE-2024-10793Kavram kanıtı | WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parametermelapress · wp activity log · CWE-79 | Orta6,1 | — | %1,4 | 15 Kas 2024 |
24İzleyin | CVE-2024-32568İstismar yok | WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilitymelapress · wp 2fa · CWE-79 | Orta6,1 | — | %0,4 | 18 Nis 2024 |
24İzleyin | CVE-2023-50905İstismar yok | WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)melapress · wp activity log · CWE-79 | Orta6,1 | — | %0,3 | 29 Şub 2024 |
21İzleyin | CVE-2022-44595İstismar yok | WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerabilitymelapress · wp 2fa · CWE-287 | Orta5,3 | — | %0,5 | 21 Mar 2024 |
21İzleyin | CVE-2024-9879İstismar yok | Website File Changes < 2.1.1 - Authenticated SQL Injectionmelapress · melapress file monitor · CWE-89 | Orta5,4 | — | %0,3 | 15 May 2025 |
21İzleyin | CVE-2025-3702İstismar yok | WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerabilitymelapress · melapress file monitor · CWE-862 | Orta5,4 | — | %0,2 | 3 Tem 2025 |
17İzleyin | CVE-2023-6520İstismar yok | WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgerymelapress · wp 2fa · CWE-352 | Orta4,3 | — | %0,2 | 11 Oca 2024 |
16İzleyin | CVE-2024-10009İstismar yok | Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injectionmelapress · melapress file monitor · CWE-89 | Orta4,1 | — | %0,4 | 15 May 2025 |
- CVE-2024-201835İzleyin
WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection
YüksekCVSS 8,8İstismar yokEPSS %1melapress · wp activity log9 Nis 2024
- CVE-2025-287632İzleyin
MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion
YüksekCVSS 8,2İstismar yokEPSS %0melapress · melapress login security8 Nis 2025
- CVE-2022-4458730İzleyin
WordPress WP 2FA plugin <= 2.6.3 - Sensitive Data Exposure via Log File vulnerability
YüksekCVSS 7,5İstismar yokEPSS %0melapress · wp 2fa21 Haz 2024
- CVE-2025-3956528İzleyin
WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1melapress · melapress login security16 Nis 2025
- CVE-2024-3565028İzleyin
WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability
YüksekCVSS 7,2İstismar yokEPSS %1melapress · melapress login security10 Haz 2024
- CVE-2025-076725İzleyin
WP Activity Log 5.3.2 - Insecure deserialization
OrtaCVSS 6,3İstismar yokEPSS %0melapress · wp activity log27 Şub 2025
- CVE-2025-092424İzleyin
WP Activity Log <= 5.2.2 - Unauthenticated Stored Cross-Site Scripting
OrtaCVSS 6,1Kavram kanıtıEPSS %1melapress · wp activity log17 Şub 2025
- CVE-2024-1079324İzleyin
WP Activity Log <= 5.2.1 - Unauthenticated Stored Cross-Site Scripting via User_id Parameter
OrtaCVSS 6,1Kavram kanıtıEPSS %1melapress · wp activity log15 Kas 2024
- CVE-2024-3256824İzleyin
WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerability
OrtaCVSS 6,1İstismar yokEPSS %0melapress · wp 2fa18 Nis 2024
- CVE-2023-5090524İzleyin
WordPress WP Activity Log Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)
OrtaCVSS 6,1İstismar yokEPSS %0melapress · wp activity log29 Şub 2024
- CVE-2022-4459521İzleyin
WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerability
OrtaCVSS 5,3İstismar yokEPSS %0melapress · wp 2fa21 Mar 2024
- CVE-2024-987921İzleyin
Website File Changes < 2.1.1 - Authenticated SQL Injection
OrtaCVSS 5,4İstismar yokEPSS %0melapress · melapress file monitor15 May 2025
- CVE-2025-370221İzleyin
WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability
OrtaCVSS 5,4İstismar yokEPSS %0melapress · melapress file monitor3 Tem 2025
- CVE-2023-652017İzleyin
WP 2FA – Two-factor authentication for WordPress <= 2.5.0 - Cross-Site Request Forgery
OrtaCVSS 4,3İstismar yokEPSS %0melapress · wp 2fa11 Oca 2024
- CVE-2024-1000916İzleyin
Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection
OrtaCVSS 4,1İstismar yokEPSS %0melapress · melapress file monitor15 May 2025