Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: MainWP Component: Mainwp Child Clear all filters
TI-2023-02935 CVE-2023-3132 · GHSA-pj2m-32wc-vcp2

MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files

Priority LOW 34

The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00656 Published 2023-06-27 No fix listed CWE-200
TI-2021-07159 CVE-2021-24877 · GHSA-jq58-mjxh-8fp7

MainWP Child < 4.1.8 - Admin+ SQL Injection

Priority LOW 34

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when th…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01279 Published 2021-11-23 Fixed in 4.1.8 CWE-89