MainWP

Records25All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

MainWP records in CISA KEV

No MainWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mainwp Child 3 records LOW Mainwp Dashboard 3 records LOW Code Snippets Extension 2 records MEDIUM Mainwp Child Reports 2 records LOW Mainwp 1 record LOW Mainwp Google Analytics Extension 1 record LOW Mainwp Maintenance Extension 1 record LOW Mainwp Wordfence Extension 1 record LOW

Records

2 records in Code Snippets Extension · all components

TI-2023-09470 CVE-2023-23645 · GHSA-9mxj-v3x9-fjfr

Code injection in MainWP Code Snippets Extension

MEDIUM 45

Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainWP Code Snippets Extension: from n/a through 4.0.2.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00975 Published 2024-05-17 No fix listed CWE-94

TI-2023-09474 CVE-2023-23650 · GHSA-h7m2-2wv3-wrv5

WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in MainWP MainWP Code Snippets Extension plugin <= 4.0.2 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00383 Published 2023-03-23 No fix listed CWE-79

Open these records in search →

Critical	3
High	15
Medium	7
Low	0
No CVSS	0