Skip to content
OpenAdvisories
High · 7.6 CVE-2023-38519 EUVD-2023-3157GHSA-87fg-9x5w-j3rm

WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3.

Affected products

VendorProductAffectedFixed
MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance ≤ 4.4.3.3 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist mainwp/mainwp < 4.4.3.4 4.4.3.4 GHSA-87fg-9x5w-j3rm

References