Read the docs

MainWP

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

MainWP records in CISA KEV

No MainWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mainwp Child 3 records LOW Mainwp Dashboard 3 records LOW Code Snippets Extension 2 records MEDIUM Mainwp Child Reports 2 records LOW Mainwp 1 record LOW Mainwp Google Analytics Extension 1 record LOW Mainwp Maintenance Extension 1 record LOW Mainwp Wordfence Extension 1 record LOW

Records

1 record in Mainwp · all components

TI-2023-05668 CVE-2023-6164 · GHSA-666g-9c82-3mm3

MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injection

Priority LOW 22

The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in all versions up to, and including, 4.5.1.2 due to insufficien…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00395 Published 2023-11-22 No fix listed CWE-74
Open these records in search →