Skip to content

Mainwp vulnerabilities

Products

Newest

mainwp child WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability CVE-2026-105436 8.8 HighOctober 8, 2026
mainwp child, unknown mainwp child +1 more MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration CVE-2026-12255 8.1 HighJuly 27, 2026
mainwp WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability CVE-2026-57327 6.3 MediumJune 29, 2026
mainwp child WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability CVE-2026-27366 7.5 HighJune 25, 2026
mainwp child reports MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API CVE-2026-4299 5.3 MediumApril 8, 2026
mainwp child – securely connects to the mainwp dashboard to manage multiple sites MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation CVE-2024-10783 8.1 HighDecember 13, 2024
mainwp dashboard, dashboard: self-hosted wordpress management for agencies +1 more MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting CVE-2016-15041 Public exploit 7.2 HighOctober 16, 2024
mainwp child reports, child +1 more MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update CVE-2024-7492 8.8 HighAugust 8, 2024
mainwp updraftplus extension WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability CVE-2023-23640 5.4 MediumJune 9, 2024
mainwp staging extension WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability CVE-2023-23639 5.4 MediumJune 9, 2024
mainwp code snippets extension WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability CVE-2023-23645 9.9 CriticalMay 17, 2024
mainwp child reports WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-33680 5.4 MediumApril 26, 2024
mainwp links manager extension WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability CVE-2023-23649 8.1 HighMarch 28, 2024
mainwp file uploader extension WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability CVE-2023-23656 10.0 CriticalMarch 26, 2024
mainwp wordfence extension WordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation Vulnerability CVE-2023-22699 5.4 MediumMarch 25, 2024
mainwp dashboard, dashboard: self-hosted wordpress management for agencies +1 more MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk CVE-2024-1642 4.3 MediumMarch 13, 2024
mainwp dashboard – wordpress manager for multiple websites maintenance, dashboard +1 more WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection CVE-2023-38519 Fix available 7.6 HighDecember 20, 2023
mainwp, mainwp dashboard: self-hosted wordpress management for agencies +1 more MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injection CVE-2023-6164 2.2 LowNovember 22, 2023
mainwp broken links checker extension, managewp broken link checker +1 more WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection CVE-2023-23737 9.3 CriticalOctober 12, 2023
mainwp google analytics extension WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability CVE-2023-23651 8.5 HighOctober 12, 2023
mainwp maintenance extension WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection CVE-2023-23660 8.5 HighJuly 18, 2023
mainwp child, child – securely connects to the mainwp dashboard to manage multiple sites +1 more MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files CVE-2023-3132 5.9 MediumJune 27, 2023
mainwp code snippets extension WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23650 6.5 MediumMarch 23, 2023
mainwp matomo extension, motomo +1 more WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-23659 4.3 MediumFebruary 23, 2023
mainwp child, unknown mainwp child - securely connects sites to the mainwp wordpress manager dashboard +1 more MainWP Child < 4.1.8 - Admin+ SQL Injection CVE-2021-24877 7.2 HighNovember 23, 2021
mainwp child reports, unknown mainwp child reports +1 more MainWP Child Reports < 2.0.8 - Admin+ SQL Injection CVE-2021-24754 7.2 HighOctober 18, 2021