melapress Vulnerabilities and Affected Products
Vulnerabilities associated with WP 2FA.
Products
Clear product- WP Activity Log13 vulnerabilities
- MelaPress Login Security4 vulnerabilities
- WP 2FA2 vulnerabilities
- WP 2FA – Two-factor authentication for WordPress2 vulnerabilities
- wp_2fa2 vulnerabilities
- wp_activity_log2 vulnerabilities
- Activity Log For MainWP1 vulnerability
- Admin Notices Manager1 vulnerability
- Melapress File Monitor1 vulnerability
- MelaPress Login Security Premium1 vulnerability
- Melapress Role Editor1 vulnerability
- WP Activity Log Premium1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-32568HIGH | WordPress WP 2FA plugin <= 2.6.2 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Melapress WP 2FA wp-2fa.This issue affects WP 2FA: from n/a through <= 2.6.2. CWE-79Apr 18, 2024 | CVSS7.1v3.1 | EPSS0.409% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-44595MEDIUM | WordPress WP2FA plugin <= 2.2.0 - Broken Authentication vulnerabilityImproper Authentication vulnerability in Melapress WP 2FA allows Authentication Bypass.This issue affects WP 2FA: from n/a through 2.2.0. CWE-287Mar 21, 2024 | CVSS5.3v3.1 | EPSS0.484% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |