Files
CVEs-PoC/2025/CVE-2025-2876.md
T
2025-09-29 21:09:30 +02:00

925 B

CVE-2025-2876

Description

The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user.

POC

Reference

No PoCs from references.

Github