- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, MelaPress Login Security recorded 0 security vulnerabilities in the last 90 days, of which 0 are rated High or Critical. None of these vulnerabilities is actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of MelaPress Login Security and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-6895MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token FunctionCVE-2025-39565WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection VulnerabilityCVE-2025-2876MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User DeletionCVE-2024-35650WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-6895MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function | Exploitation statusNot exploited | FixYes | Published07/26/2025 | SeverityCritical |
CVE-2025-39565WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability | Exploitation statusNot exploited | FixYes | Published04/16/2025 | SeverityMedium |
CVE-2025-2876MelaPress Login Security and MelaPress Login Security Premium 2.1.0 - Missing Authorization to Unauthenticated Arbitrary User Deletion | Exploitation statusNot exploited | FixNo | Published04/08/2025 | SeverityMedium |
CVE-2024-35650WordPress MelaPress Login Security plugin <= 1.3.0 - Remote File Inclusion vulnerability | Exploitation statusNot exploited | FixYes | Published06/10/2024 | SeverityMedium |
4 Results | Page 1 of 1