Melapress File Monitor
Monthly
In Melapress File Monitor plugin for WordPress before 2.2.0, missing authorization checks allow authenticated attackers to exploit incorrectly configured access control, potentially leading to unauthorized modification of integrity or availability of monitored data. The vulnerability carries a CVSS 3.1 base score of 5.4 (medium) and has a low EPSS exploitation probability (0.06%), with no known active exploitation or public exploit code. A vendor patch in version 2.2.0 addresses the issue.
The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
In Melapress File Monitor plugin for WordPress before 2.2.0, missing authorization checks allow authenticated attackers to exploit incorrectly configured access control, potentially leading to unauthorized modification of integrity or availability of monitored data. The vulnerability carries a CVSS 3.1 base score of 5.4 (medium) and has a low EPSS exploitation probability (0.06%), with no known active exploitation or public exploit code. A vendor patch in version 2.2.0 addresses the issue.
The Melapress File Monitor WordPress plugin before 2.1.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
The Melapress File Monitor WordPress plugin before 2.1.0 does not sanitize and escape a parameter before using it in a SQL statement, allowing admins to perform SQL injection attacks. Rated medium severity (CVSS 4.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.