← Database

CVE-2025-2876

MEDIUM CVSS: 5.3 Published: 2025-04-08 Modified: 2026-06-17

Description

The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user.

Affected Platforms

Melapress Melapress Login Security

Weakness Type

CWE-862

References