CVE-2025-3702

CVE-2025-3702 describes a Missing Authorization (broken access control) vulnerability in the WordPress Melapress File Monitor plugin, affecting versions prior to 2.2.0. Multiple sources consolidate the same issue. The root cause is improperly configured access control levels that can be exploited...

CVE-2024-9879

The Melapress File Monitor WordPress plugin is vulnerable to SQL injection in versions prior to 2.1.1 . The root cause is the failure to properly sanitize and escape a parameter before using it in a SQL statement. This flaw allows authenticated admins to perform SQL injection attacks. Remediation...

CVE-2024-10009

The Melapress File Monitor WordPress plugin, in versions prior to 2.1.0 , is vulnerable to an authenticated SQL injection attack. The root cause is the failure to properly sanitize and escape a parameter before incorporating it into a SQL statement. This flaw allows users with administrator privi...