4.9
Medium
CVE-2024-35650 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in…
Description
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Melapress MelaPress Login Security melapress-login-security.This issue affects MelaPress Login Security: from n/a through <= 1.3.0.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MelaPress Login Security 1.3 | earliest → 1.3.0 | No fix stated |
Other CVEs of MelaPress Login Security
The 4 CVEs of MelaPress Login Security →
CVE-2025-6895
The Melapress Login Security plugin for WordPress is vulnerable to Authentication Bypass due to missing authorization…
9.8
Critical
CVE-2025-39565
Deserialization of Untrusted Data vulnerability in Melapress MelaPress Login Security melapress-login-security allows…
6.6
Medium
CVE-2025-2876
The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized…
5.3
Medium