Skip to content
OpenAdvisories

Product · mainwp

MainWP Child Reports

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-7492

    MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

    The MainWP Child Reports plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2. This is due to missing or incorrect nonce validation on the network_options_action() function. This makes it possible for unau…

    mainwp MainWP Child Reports Web / CMS