Lucene search
+L

56 matches found

NVD
NVD
•added 2025/10/21 1:15 p.m.•19 views

CVE-2025-6239

Zohocorp ManageEngine Applications Manager versions 176800 and below are vulnerable to information disclosure in File/Directory monitor...

6.5CVSS0.00957EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/21 12:25 p.m.•31 views

CVE-2025-6239

The CVE-2025-6239 issue affects Zohocorp ManageEngine Applications Manager (versions 176800 and below). The root cause is information disclosure due to improper file/directory monitoring in the File/Directory monitor component. Attackers could access sensitive information exposed by this monitori...

6.5CVSS5.7AI score0.00957EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•21 views

EUVD-2025-19863

Malicious code in bioql PyPI...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/23 11:15 a.m.•11 views

CVE-2025-27930

Zohocorp ManageEngine Applications Manager versions 176600 and prior are vulnerable to stored cross-site scripting in the File/Directory monitor...

5.4CVSS5.7AI score0.00405EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/05 1:21 p.m.•22 views

CVE-2025-3702

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through 2.2.0...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/03 1:15 p.m.•17 views

CVE-2025-3702

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through 2.2.0...

5.4CVSS0.00266EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/03 1:15 p.m.•33 views

CVE-2025-3702

Missing Authorization vulnerability in Melapress Melapress File Monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a before 2.2.0...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/03 12:14 p.m.•64 views

CVE-2025-3702

CVE-2025-3702 describes a Missing Authorization (broken access control) vulnerability in the WordPress Melapress File Monitor plugin, affecting versions prior to 2.2.0. Multiple sources consolidate the same issue. The root cause is improperly configured access control levels that can be exploited...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/03 12:14 p.m.•13 views

CVE-2025-3702 WordPress Melapress File Monitor plugin < 2.2.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in Melapress Melapress File Monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a before 2.2.0...

5.4CVSS7.2AI score0.00266EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/07/03 12:00 a.m.•16 views

WordPress plugin Melapress File Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/03 12:00 a.m.•3 views

CVE-2025-3702: Missing Authorization

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through 2.2.0...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/03 12:00 a.m.•24 views

PT-2025-27794 · Unknown · Melapress File Monitor

Name of the Vulnerable Software and Affected Versions: Melapress File Monitor version prior to 2.2.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior to...

5.4CVSS6.3AI score0.00266EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/05/19 4:01 a.m.•19 views

WordPress Website File Changes plugin < 2.1.1 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by y4ng0615 in WordPress Plugin Melapress File Monitor versions 2.1.1...

5.4CVSS8AI score0.00326EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/05/15 8:16 p.m.•18 views

CVE-2024-9879

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

5.4CVSS5.8AI score0.00326EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:16 p.m.•20 views

CVE-2024-9879

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

5.4CVSS0.00326EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/15 8:15 p.m.•13 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

4.1CVSS5.8AI score0.00401EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:15 p.m.•28 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

4.1CVSS0.00401EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/05/15 8:07 p.m.•30 views

CVE-2024-9879 Website File Changes < 2.1.1 - Authenticated SQL Injection

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

0.00326EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/15 8:07 p.m.•55 views

CVE-2024-9879

The Melapress File Monitor WordPress plugin is vulnerable to SQL injection in versions prior to 2.1.1 . The root cause is the failure to properly sanitize and escape a parameter before using it in a SQL statement. This flaw allows authenticated admins to perform SQL injection attacks. Remediation...

5.4CVSS7.6AI score0.00326EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2025/05/15 8:06 p.m.•49 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin, in versions prior to 2.1.0 , is vulnerable to an authenticated SQL injection attack. The root cause is the failure to properly sanitize and escape a parameter before incorporating it into a SQL statement. This flaw allows users with administrator privi...

4.1CVSS7.6AI score0.00401EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder