CVEs we hold for Mainwp
Records whose assigning authority named Mainwp as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-4299MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via…MainWP Child Reports
CVE-2026-27366WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerabilityMainWP Child
CVE-2026-12255MainWP Child < 6.1.2 - Unauthenticated Administrator Authentication Bypass via Passwordless Site RegistrationUnknown MainWP Child
CVE-2024-7492MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options UpdateMainWP Child Reports
CVE-2024-33680WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerabilityMainWP Child Reports
CVE-2024-1642MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulkMainWP Dashboard: Self-hosted WordPress Management for…
CVE-2024-10783MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege EscalationMainWP Dashboard to Manage Multiple Sites
CVE-2023-6164MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS InjectionMainWP Dashboard: Self-hosted WordPress Management for…
CVE-2023-38519WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL InjectionMainWP Dashboard – WordPress Manager for Multiple Websites…
CVE-2023-3132MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up FilesMainWP Dashboard to Manage Multiple Sites
CVE-2023-23737WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL InjectionMainWP Broken Links Checker Extension
CVE-2023-23660WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL InjectionMainWP Maintenance Extension
CVE-2023-23659WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)MainWP Matomo Extension
CVE-2023-23656WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload VulnerabilityMainWP File Uploader Extension
CVE-2023-23651WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerabilityMainWP Google Analytics Extension
CVE-2023-23650WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)MainWP Code Snippets Extension
CVE-2023-23649WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection VulnerabilityMainWP Links Manager Extension
CVE-2023-23645WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution…MainWP Code Snippets Extension
CVE-2023-23640WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation VulnerabilityMainWP UpdraftPlus Extension
CVE-2023-23639WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation VulnerabilityMainWP Staging Extension
CVE-2023-22699WordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation VulnerabilityMainWP Wordfence Extension
CVE-2021-24877MainWP Child < 4.1.8 - Admin+ SQL InjectionUnknown MainWP Child - Securely connects sites to the…
CVE-2016-15041MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site…MainWP Dashboard: Self-hosted WordPress Management for…
25 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.