Skip to content
OpenAdvisories

Vendor

mainwp

23 known vulnerabilities.

Products

MainWP Child Reports 3 MainWP Dashboard: Self-hosted WordPress Management for Agencies 3 MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites 2 MainWP Child 2 MainWP Code Snippets Extension 2 MainWP Links Manager Extension 1 MainWP 1 MainWP Maintenance Extension 1 MainWP Google Analytics Extension 1 MainWP Matomo Extension 1 MainWP UpdraftPlus Extension 1 MainWP File Uploader Extension 1 MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance 1 MainWP Wordfence Extension 1 MainWP Staging Extension 1 MainWP Broken Links Checker Extension 1
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-57327

    WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability

    Subscriber Broken Access Control in MainWP <= 6.1.1 versions.

    mainwp MainWP
  • Medium 5.3
    CVE-2026-4299

    MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API

    The MainWP Child Reports plugin for WordPress is vulnerable to Missing Authorization in all versions up to and including 2.2.6. This is due to a missing capability check in the heartbeat_received() function in the Live_Update class. This makes it possible for…

    mainwp MainWP Child Reports Web / CMS
  • Medium 5.4
    CVE-2023-23640

    WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP UpdraftPlus Extension.This issue affects MainWP UpdraftPlus Extension: from n/a through 4.0.6.

    mainwp MainWP UpdraftPlus Extension
  • Medium 5.4
    CVE-2023-23639

    WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP Staging Extension.This issue affects MainWP Staging Extension: from n/a through 4.0.3.

    mainwp MainWP Staging Extension
  • Medium 5.4
    CVE-2024-33680

    WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1.

    mainwp MainWP Child Reports
  • Medium 5.4
    CVE-2023-22699

    WordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    Missing Authorization vulnerability in MainWP MainWP Wordfence Extension.This issue affects MainWP Wordfence Extension: from n/a through 4.0.7.

    mainwp MainWP Wordfence Extension
  • Medium 4.3
    CVE-2024-1642

    MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk

    The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.0.1. This is due to missing or incorrect nonce validation on the 'posting_bul…

    mainwp MainWP Dashboard: Self-hosted WordPress Management for Agencies Web / CMS
  • Medium 5.9
    CVE-2023-3132

    MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files

    The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files. This makes it possible for unauthenticated attackers to extract sensi…

    mainwp MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites Web / CMS
  • Medium 6.5
    CVE-2023-23650

    WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4.0.2 versions.

    mainwp MainWP Code Snippets Extension
  • Medium 4.3
    CVE-2023-23659

    WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in MainWP Matomo Extension <= 4.0.4 versions.

    mainwp MainWP Matomo Extension