High · 8.5 CVE-2023-23660 EUVD-2023-27747GHSA-cw2p-3cv7-rfrj

WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

Published Jul 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: mainwp Product: MainWP Maintenance Extension

Description

Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP MainWP Maintenance Extension plugin <= 4.1.1 versions.

Affected products

Vendor	Product	Affected	Fixed
MainWP	MainWP Maintenance Extension	≤ 4.1.1	—

References

https://patchstack.com/database/vulnerability/mainwp-maintenance-extension/wordpress-mainwp-maintenance-extension-plugin-4-1-1-subscriber-sql-injection-vulnerability?_s_id=cve vdb-entry
https://patchstack.com/articles/multiple-vulnerabilities-affecting-mainwp-extensions?_s_id=cve third-party-advisory technical-description