CVE-2025-2876: Melapress Login Security

High severity, CVSS 8.2. EPSS: 0.4% chance of exploitation in the next 30 days.

The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user.

Affected products

• Melapress Melapress Login Security: before 2.1.1 (fixed in 2.1.1)

Published 2025-04-08. Last modified 2026-06-17.