WordPress plugin
Melapress Login Security security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical1
- High1
- Medium2
- Low0
All Melapress Login Security vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function 2.1.0 – 2.1.1Update to 2.2.0 | CVE-2025-6895 | |
| High7.2 | Authenticated (Administrator+) PHP Object Injection ≤2.1.0Update to 2.1.1 | CVE-2025-39565 | |
| Medium5.3 | Missing Authorization to Unauthenticated Arbitrary User Deletion 2.1.0 – 2.1.0Update to 2.1.1 | CVE-2025-2876 | |
| Medium6.6 | Authenticated (Admin+) Remote File Inclusion ≤1.3.0Update to 1.3.1 | CVE-2024-35650 |
- Critical9.82.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function
2.1.0 – 2.1.1Update to 2.2.0
- High7.2Authenticated (Administrator+) PHP Object Injection
≤2.1.0Update to 2.1.1
- Medium5.3Missing Authorization to Unauthenticated Arbitrary User Deletion
2.1.0 – 2.1.0Update to 2.1.1
- Medium6.6Authenticated (Admin+) Remote File Inclusion
≤1.3.0Update to 1.3.1
Melapress Login Security: common questions
Does Melapress Login Security have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in Melapress Login Security: 1 critical, 1 high, 2 medium. None are known to affect version null.
How do I check which version of Melapress Login Security I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Melapress Login Security vulnerability?
CVE-2025-6895, published Jul 25, 2025: MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function. Severity: Critical (CVSS 9.8).
Is any Melapress Login Security vulnerability listed in CISA KEV?
No. None of the known Melapress Login Security vulnerabilities is currently listed in the CISA KEV catalog.