CVE-2025-2876

Published: 2025-04-08T12:15Z

Last Modified: 2025-04-08T18:13Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt