Read the docs

MainWP

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

MainWP records in CISA KEV

No MainWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mainwp Child 3 records LOW Mainwp Dashboard 3 records LOW Code Snippets Extension 2 records MEDIUM Mainwp Child Reports 2 records LOW Mainwp 1 record LOW Mainwp Google Analytics Extension 1 record LOW Mainwp Maintenance Extension 1 record LOW Mainwp Wordfence Extension 1 record LOW

Records

2 records in Mainwp Child Reports · all components

TI-2021-07036 CVE-2021-24754 · GHSA-cw7q-rfx2-vv75

MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

Priority LOW 34

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01371 Published 2021-10-18 Fixed in 2.0.8 CWE-89
Open these records in search →