Records25All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9
Exploited now
MainWP records in CISA KEVNo MainWP vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 39
Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP Google Analytics Extension plugin <= 4.0.4 versions.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00727 · Published 2023-10-12 · No fix listed CWE-89
Open these records in search →