Boletines de Vulnerabilidades

CVE-2025-2876

   
Software afectado WORDPRESS
 
The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-2876