Description
Unauthenticated Broken Access Control in MainWP Child <= 6.1.1 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MainWP | MainWP Child | ≤ 6.1.1 | — |
High · 7.5
CVE-2026-27366
EUVD-2026-39362GHSA-hpf4-4ccj-785m
WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability
Published Jun 25, 2026 · Updated Jun 29, 2026 · Assigned by Patchstack