Mainwp Child vulnerabilities

• mainwp child WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability CVE-2026-105436 8.8 HighOctober 8, 2026
• mainwp child, unknown mainwp child +1 more MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site Registration CVE-2026-12255 8.1 HighJuly 27, 2026
• mainwp child WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability CVE-2026-27366 7.5 HighJune 25, 2026
• mainwp child reports MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API CVE-2026-4299 5.3 MediumApril 8, 2026
• mainwp child – securely connects to the mainwp dashboard to manage multiple sites MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation CVE-2024-10783 8.1 HighDecember 13, 2024
• mainwp child reports, child +1 more MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update CVE-2024-7492 8.8 HighAugust 8, 2024
• mainwp child reports WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-33680 5.4 MediumApril 26, 2024
• mainwp child, child – securely connects to the mainwp dashboard to manage multiple sites +1 more MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files CVE-2023-3132 5.9 MediumJune 27, 2023
• mainwp child reports, unknown mainwp child reports +1 more MainWP Child Reports < 2.0.8 - Admin+ SQL Injection CVE-2021-24754 7.2 HighOctober 18, 2021