Read the docs

MainWP

Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

MainWP records in CISA KEV

No MainWP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mainwp Child 3 records LOW Mainwp Dashboard 3 records LOW Code Snippets Extension 2 records MEDIUM Mainwp Child Reports 2 records LOW Mainwp 1 record LOW Mainwp Google Analytics Extension 1 record LOW Mainwp Maintenance Extension 1 record LOW Mainwp Wordfence Extension 1 record LOW

Records

3 records in Mainwp Dashboard · all components

TI-2023-19899 CVE-2023-38519 · GHSA-87fg-9x5w-j3rm

WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – Wo…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00551 Published 2023-12-20 Fixed in 4.4.3.4 CWE-89
TI-2016-09161 CVE-2016-15041 · GHSA-c7x4-5776-rm5h

Cross-site scripting in MainWP Dashboard: Self-hosted WordPress Management for Agencies

Priority LOW 34

The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, a…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01337 Published 2024-10-16 Fixed in 3.1.3 CWE-79
TI-2024-01525 CVE-2024-1642 · GHSA-cffp-9f2r-rh52

MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk

Priority LOW 20

The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.0.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00303 Published 2024-03-13 No fix listed CWE-352
Open these records in search →