Lucene search
+L

23 matches found

EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2025-19863

Malicious code in bioql PyPI...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/07/05 1:21 p.m.•22 views

CVE-2025-3702

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through 2.2.0...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
OSV
OSV
•added 2025/07/03 1:15 p.m.•32 views

CVE-2025-3702

Missing Authorization vulnerability in Melapress Melapress File Monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a before 2.2.0...

5.4CVSS5.8AI score0.00266EPSS
SaveExploits0References1
NVD
NVD
•added 2025/07/03 1:15 p.m.•17 views

CVE-2025-3702

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through 2.2.0...

5.4CVSS0.00266EPSS
SaveExploits0References1
CVE
CVE
•added 2025/07/03 12:14 p.m.•64 views

CVE-2025-3702

CVE-2025-3702 describes a Missing Authorization (broken access control) vulnerability in the WordPress Melapress File Monitor plugin, affecting versions prior to 2.2.0. Multiple sources consolidate the same issue. The root cause is improperly configured access control levels that can be exploited...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2025/07/03 12:00 a.m.•16 views

WordPress plugin Melapress File Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

5.4CVSS6.4AI score0.00266EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/03 12:00 a.m.•22 views

PT-2025-27794 · Unknown · Melapress File Monitor

Name of the Vulnerable Software and Affected Versions: Melapress File Monitor version prior to 2.2.0 Description: The issue is related to a Missing Authorization vulnerability, which allows exploiting incorrectly configured access control security levels. Recommendations: For versions prior to...

5.4CVSS6.3AI score0.00266EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/03 12:00 a.m.•2 views

CVE-2025-3702: Missing Authorization

Missing Authorization vulnerability in Melapress Melapress File Monitor website-file-changes-monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a through 2.2.0...

5.4CVSS5.9AI score0.00266EPSS
SaveExploits0References1
Patchstack
Patchstack
•added 2025/05/19 4:01 a.m.•18 views

WordPress Website File Changes plugin < 2.1.1 - Authenticated SQL Injection vulnerability

Authenticated SQL Injection vulnerability discovered by y4ng0615 in WordPress Plugin Melapress File Monitor versions 2.1.1...

5.4CVSS8AI score0.00326EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2025/05/15 8:16 p.m.•16 views

CVE-2024-9879

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

5.4CVSS5.8AI score0.00326EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:16 p.m.•20 views

CVE-2024-9879

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

5.4CVSS0.00326EPSS
SaveExploits1References1
OSV
OSV
•added 2025/05/15 8:15 p.m.•13 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

4.1CVSS5.8AI score0.00401EPSS
SaveExploits1References1
NVD
NVD
•added 2025/05/15 8:15 p.m.•27 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

4.1CVSS0.00401EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/15 8:07 p.m.•52 views

CVE-2024-9879

The Melapress File Monitor WordPress plugin is vulnerable to SQL injection in versions prior to 2.1.1 . The root cause is the failure to properly sanitize and escape a parameter before using it in a SQL statement. This flaw allows authenticated admins to perform SQL injection attacks. Remediation...

5.4CVSS7.6AI score0.00326EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2025/05/15 8:07 p.m.•30 views

CVE-2024-9879 Website File Changes < 2.1.1 - Authenticated SQL Injection

The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

0.00326EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2025/05/15 8:06 p.m.•11 views

CVE-2024-10009 Website File Changes < 2.1.0 - Admin+ Authenticated SQL Injection

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

7.6AI score0.00401EPSS
SaveExploits1References1
CVE
CVE
•added 2025/05/15 8:06 p.m.•48 views

CVE-2024-10009

The Melapress File Monitor WordPress plugin, in versions prior to 2.1.0 , is vulnerable to an authenticated SQL injection attack. The root cause is the failure to properly sanitize and escape a parameter before incorporating it into a SQL statement. This flaw allows users with administrator privi...

4.1CVSS7.6AI score0.00401EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/05/15 12:00 a.m.•1 views

CVE-2024-10009: Improper Neutralization of Special Elements used in an SQL Command

The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks...

4.1CVSS5.8AI score0.00401EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/05/15 12:00 a.m.•8 views

PT-2025-21392 · Unknown · Melapress File Monitor

Name of the Vulnerable Software and Affected Versions: Melapress File Monitor WordPress plugin versions prior to 2.1.0 Description: The issue allows admins to perform SQL injection attacks due to a parameter not being sanitized and escaped before use in a SQL statement. Recommendations: For...

4.1CVSS4.9AI score0.00401EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/05/15 12:00 a.m.•11 views

WordPress plugin Melapress File Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security vulnerability...

4.1CVSS5.8AI score0.00401EPSS
SaveExploits1References1
Rows per page
Query Builder