CVE-2025-39565: WordPress MelaPress Login Security plugin <= 2.1.0 - PHP Object Injection Vulnerability
Deserialization of Untrusted Data vulnerability in Melapress MelaPress Login Security melapress-login-security allows Object Injection.This issue affects MelaPress Login Security: from n/a through <= 2.1.0.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-39565?
CVE-2025-39565 is classified as a critical vulnerability due to its potential for object injection through deserialization of untrusted data.
How do I fix CVE-2025-39565?
To mitigate CVE-2025-39565, update the MelaPress Login Security plugin to a version later than 2.1.0.
Who is affected by CVE-2025-39565?
CVE-2025-39565 affects users of MelaPress Login Security plugin versions up to and including 2.1.0.
What kind of attacks can CVE-2025-39565 enable?
CVE-2025-39565 can lead to remote code execution by allowing attackers to inject malicious objects.
Is there a workaround for CVE-2025-39565?
As a workaround for CVE-2025-39565, it is advised to disable the MelaPress Login Security plugin until an update can be applied.