CVE-2025-3702

CVE-2025-3702 describes a Missing Authorization (broken access control) vulnerability in the WordPress Melapress File Monitor plugin, affecting versions prior to 2.2.0. Multiple sources consolidate the same issue. The root cause is improperly configured access control levels that can be exploited...

CVE-2024-9879

The WordPress plugin Melapress File Monitor (vulnerable: prior to 2.1.1) exposes an SQL injection vulnerability caused by an unsanitized parameter used in a SQL statement. Affected product matches: Melapress File Monitor WordPress plugin before 2.1.1. Underlying cause is lack of input sanitizatio...

CVE-2024-10009

The CVE-2024-10009 entry relates to the Melapress File Monitor WordPress plugin prior to version 2.1.0. The root cause is insufficient sanitization and escaping of a parameter used in an SQL statement, enabling an SQL injection attack by admins. Reported details across multiple sources confirm th...