Pricing
Case studies
Login
Start trial
WP 2FA
Melapress
Developer
4.2.1
Latest version
100,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
12 patched
2 Mitigation rules
Admin+ Arbitrary User 2FA Removal vulnerability
< 4.2.0
3 days ago
Cross Site Request Forgery (CSRF) vulnerability
<= 4.1.0
08/10/2026
Two-Factor Authentication Bypass vulnerability
< 4.1.0
05/10/2026
2-Factor Authentication Bypass vulnerability
<= 2.9.3
02/12/2025
Sensitive Data Exposure via Log File vulnerability
<= 2.6.3
20/06/2024
Reflected Cross Site Scripting (XSS) vulnerability
<= 2.6.2
16/04/2024
Insecure Direct Object Reference to Arbitrary Email Sending vulnerability
<= 2.5.0
03/01/2024
Cross-Site Request Forgery vulnerability
<= 2.5.0
03/01/2024
Broken Authentication vulnerability
<= 2.2.0
07/12/2022
Time-Based Side-Channel Attack vulnerability
<= 2.2.1
14/09/2022
Reflected Cross-Site Scripting (XSS) vulnerability
<= 2.2.0
06/05/2022
Arbitrary 2FA Disabling via Insecure Direct Object References (IDOR) vulnerability
<= 2.1.0
29/04/2022
×
Advertisement