Skip to content
OpenAdvisories

Vendor

mainwp

23 known vulnerabilities.

Products

MainWP Child Reports 3 MainWP Dashboard: Self-hosted WordPress Management for Agencies 3 MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites 2 MainWP Child 2 MainWP Code Snippets Extension 2 MainWP Links Manager Extension 1 MainWP 1 MainWP Maintenance Extension 1 MainWP Google Analytics Extension 1 MainWP Matomo Extension 1 MainWP UpdraftPlus Extension 1 MainWP File Uploader Extension 1 MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance 1 MainWP Wordfence Extension 1 MainWP Staging Extension 1 MainWP Broken Links Checker Extension 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 8.8
    CVE-2026-105436

    WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

    Deserialization of Untrusted Data vulnerability in MainWP MainWP Child mainwp-child allows Object Injection.This issue affects MainWP Child: from n/a through 6.2.1.

    mainwp MainWP Child
  • High 7.5
    CVE-2026-27366

    WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.

    mainwp MainWP Child
  • High 8.1
    CVE-2024-10783

    MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation

    The MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites plugin for WordPress is vulnerable to privilege escalation due to a missing authorization checks on the register_site function in all versions up to, and including, 5.2 when…

    mainwp MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites Web / CMS
  • High 7.2
    CVE-2016-15041 Public exploit

    MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting

    The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, and including, 3.1.2 due to insufficient…

    mainwp MainWP Dashboard: Self-hosted WordPress Management for Agencies Web / CMS
  • High 8.8
    CVE-2024-7492

    MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

    The MainWP Child Reports plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the network_options_action() function. This makes it possible for unau…

    mainwp MainWP Child Reports Web / CMS
  • High 8.1
    CVE-2023-23649

    WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability

    Deserialization of Untrusted Data vulnerability in MainWP MainWP Links Manager Extension.This issue affects MainWP Links Manager Extension: from n/a through 2.1.

    mainwp MainWP Links Manager Extension
  • High 7.6
    CVE-2023-38519

    WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites M…

    mainwp MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance mainwp/mainwp Web / CMS Packagist
  • High 8.5
    CVE-2023-23651

    WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

    Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP Google Analytics Extension plugin <= 4.0.4 versions.

    mainwp MainWP Google Analytics Extension
  • High 8.5
    CVE-2023-23660

    WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

    Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP MainWP Maintenance Extension plugin <= 4.1.1 versions.

    mainwp MainWP Maintenance Extension