Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: MainWP Component: Mainwp Dashboard Clear all filters
TI-2016-09161 CVE-2016-15041 · GHSA-c7x4-5776-rm5h

Cross-site scripting in MainWP Dashboard: Self-hosted WordPress Management for Agencies

Priority LOW 34

The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, a…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01337 Published 2024-10-16 Fixed in 3.1.3 CWE-79
TI-2024-01525 CVE-2024-1642 · GHSA-cffp-9f2r-rh52

MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk

Priority LOW 20

The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.0.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00303 Published 2024-03-13 No fix listed CWE-352
TI-2023-19899 CVE-2023-38519 · GHSA-87fg-9x5w-j3rm

WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – Wo…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00551 Published 2023-12-20 Fixed in 4.4.3.4 CWE-89