EUVD-2025-19863Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessGain low-privileged WordPress account
-
ExploitSend crafted HTTP request to Melapress File Monitor endpoint
-
ImpactUnauthorized modification of file monitoring integrity or availability
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Authorization checks on every request
MITRE ATT&CK
1 technique across 1 tactic: Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an authenticated WordPress user account with at least low privileges (e.g., subscriber). No other special conditions-the vulnerability is present in default plugin configurations prior to version 2.2.0; the missing authorization exists without any non-default settings. |
| Impact | CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) indicates a network-exploitable vulnerability with low attack complexity, requiring low privileges and no user interaction, causing no confidentiality impact but low integrity and availability impacts. EPSS score of 0.06% (17th percentile) suggests a very low probability of exploitation in the wild, and no KEV listing indicates it is not actively exploited. The missing authorization is a common pattern, but the authenticated access requirement and limited impact keep real-world risk moderate. This is not a high-priority critical flaw; typical of a medium-severity access control issue in a niche WordPress plugin. No conflicting signals between CVSS and EPSS-both point to limited urgency. |
| Exploit ScenarioDerived | A remote authenticated WordPress user with a low-privilege role (e.g., subscriber) sends a crafted HTTP request to a vulnerable Melapress File Monitor endpoint, bypassing authorization checks and modifying file change monitoring data or disabling alerts. No public exploit code is known, but the low complexity and network vector make the attack plausible once authenticated access is obtained. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv2 – Jul 26, 2026
In Melapress File Monitor plugin for WordPress before 2.2.0, missing authorization checks allow authenticated attackers to exploit incorrectly configured access control, potentially leading to unauthorized modification of integrity or availability of monitored data. The vulnerability carries a CVSS 3.1 base score of 5.4 (medium) and has a low EPSS exploitation probability (0.06%), with no known active exploitation or public exploit code. A vendor patch in version 2.2.0 addresses the issue.
Earlier versions of this analysis (1)
RemediationAI
Upgrade to Melapress File Monitor version 2.2.0 or later, which fixes the missing authorization flaw. If immediate patching is not possible, restrict WordPress user roles to only trusted accounts and audit plugin permissions; note that limiting roles may reduce file monitoring functionality for legitimate users. Vendor advisory: https://patchstack.com/database/wordpress/plugin/website-file-changes-monitor/vulnerability/wordpress-melapress-file-monitor-plugin-2-2-0-broken-access-control-vulnerability.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The vulnerability resides in the access control implementation of the Melapress File Monitor WordPress plugin (cpe:2.3:a:melapress:melapress_file_monitor). CWE-862 (Missing Authorization) indicates that the plugin fails to properly verify user permissions when performing certain actions, allowing lower-privileged authenticated users to bypass intended security restrictions. The plugin's functionality, which monitors file changes on a WordPress site, becomes vulnerable when such authorization checks are omitted, enabling unauthorized manipulation of the monitoring data or settings.
Know when Melapress File Monitor gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Low-privilege authenticated user, network access, no user interaction; integrity and availability impacts limited to plugin data.
Primary rating from NVD.
CVSS VectorNVD
Lifecycle Timeline
2DescriptionCVE.org
Missing Authorization vulnerability in Melapress Melapress File Monitor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Melapress File Monitor: from n/a before 2.2.0.
Executive ViewAI
Organizations using Missing Authorization vulnerability in Melapress Melapress File Monitor should be aware of moderate risk from CVE-2025-3702, a missing authorization vulnerability rated CVSS 5.4. Attackers could gain access beyond their authorized level. Organizations should apply vendor updates when available and monitor for exploitation.
Apply vendor patch. If patching is delayed: restrict network access and enable monitoring.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
More in Melapress File Monitor
View allThe Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a S
The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a S
GitHub PoC
Exploit-DB