WordPress Plugin Vulnerabilities

MelaPress Login Security 2.1.0 - 2.1.1 - Privilege Escalation via Authentication Bypass

Description

The plugin is vulnerable to Authentication Bypass due to missing authorization within the get_valid_user_based_on_token() function. This makes it possible for unauthenticated attackers who know an arbitrary user meta value to bypass authentication checks and log in as that user.

Affects Plugins

Plugin icon
melapress-login-security
Fixed in 2.2.0

References

CVE
CVE-2025-6895
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/6f65d5c4-6f53-4836-9130-c9f4ed3be893

Classification

Type
AUTHBYPASS
OWASP top 10
A2: Broken Authentication and Session Management
CWE
CWE-287
CVSS
9.8 (critical)

Miscellaneous

Original Researcher
kr0d
Verified
No
WPVDB ID
1de9116f-b651-4e85-b284-6a5ed49cd625

Timeline

Publicly Published
2025-07-25 (about 11 months ago)
Added
2025-07-28 (about 11 months ago)
Last Updated
2025-07-28 (about 11 months ago)

Other

Published
Title
Published
2015-02-02
Title
Revive Old Post < 6.9.4 - Privilege Escalation
Published
2025-11-26
Title
FindAll Membership < 1.1 - Authentication Bypass via Social Login
Published
2026-06-25
Title
Happy Coders OTP Login for WooCommerce < 2.8 - Unauthenticated Account Takeover via hcotp_auto_login_user
Published
2025-02-26
Title
Login Me Now < 1.7.3 - Authentication Bypass
Published
2016-06-06
Title
OneLogin SAML SSO < 2.1.6 - Authentication Bypass