melapress — Vulnerabilities & Security Advisories 25

Melapress is a WordPress plugin primarily used for creating and managing contact forms and subscription systems. Historically, it has been vulnerable to multiple security issues including remote code execution, cross-site scripting, and privilege escalation vulnerabilities. The plugin's extensive functionality and integration with WordPress core have made it a target for attackers. With 19 CVEs recorded, Melapress has faced several critical security flaws that could allow unauthorized access, data theft, and website compromise. Security researchers have consistently identified input validation and sanitization weaknesses as recurring issues in the plugin's codebase.