mainwp vulnerabilities

CVEs per yearBy the year they were published

1. 20238
2. 202411
3. 20264

Newest CVEs

• CVE-2026-105436

  WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

  MainWP · MainWP Child

  High8.8
• CVE-2026-57327

  WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability

  mainwp · MainWP

  Medium6.3
• CVE-2026-27366

  WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability

  MainWP · MainWP Child

  High7.5
• CVE-2026-4299

  MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API

  mainwp · MainWP Child Reports

  Medium5.3
• CVE-2024-10783

  MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation

  mainwp · MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites

  High8.1
• CVE-2016-15041

  MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting

  mainwp · MainWP Dashboard: Self-hosted WordPress Management for Agencies

  High7.2
• CVE-2024-7492

  MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

  mainwp · MainWP Child Reports

  High8.8
• CVE-2023-23640

  WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

  MainWP · MainWP UpdraftPlus Extension

  Medium5.4
• CVE-2023-23639

  WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

  MainWP · MainWP Staging Extension

  Medium5.4
• CVE-2023-23645

  WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability

  MainWP · MainWP Code Snippets Extension

  Critical9.9