Vendor

    MainWP

    25 known vulnerabilities in products by MainWP, 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in MainWP
    HighCVE-2024-10783

    MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation

    		8.1
    CriticalCVE-2023-23645

    MainWP Code Snippets Extension: Code Injection

    		9.9
    HighCVE-2016-15041

    MainWP Dashboard: Self-hosted WordPress Management for Agencies: Cross-site Scripting

    		7.2
    CriticalCVE-2023-23656

    MainWP File Uploader Extension: Unrestricted Upload of File with Dangerous Type

    		10.0
    HighCVE-2021-24754

    MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

    		7.2
    HighCVE-2026-105436

    WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability

    		8.8
    HighCVE-2021-24877

    MainWP Child < 4.1.8 - Admin+ SQL Injection

    		7.2
    CriticalCVE-2023-23737

    WordPress MainWP Broken Links Checker Extension Plugin <= 4.0 is vulnerable to SQL Injection

    also in 1 other product

    		9.3
    HighCVE-2023-23660

    WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

    		8.5
    HighCVE-2023-23651

    WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

    		8.5
    HighCVE-2023-23649

    MainWP Links Manager Extension: Deserialization of Untrusted Data

    		8.1
    HighCVE-2026-27366

    WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability

    		7.5
    MediumCVE-2026-4299

    MainWP Child Reports: Missing Authorization

    		5.3
    HighCVE-2023-38519

    WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

    		7.6
    HighCVE-2024-7492

    MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

    		8.8
    MediumCVE-2026-57327

    WordPress MainWP plugin <= 6.1.1 - Broken Access Control vulnerability

    		6.3
    HighCVE-2023-3132

    MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files

    		5.9
    MediumCVE-2023-23650

    WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

    		6.5
    HighCVE-2023-23640

    MainWP UpdraftPlus Extension: Missing Authorization

    		5.4
    HighCVE-2023-23639

    MainWP Staging Extension: Missing Authorization

    		5.4
    MediumCVE-2023-22699

    MainWP Wordfence Extension: Missing Authorization

    		5.4
    MediumCVE-2024-33680

    WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    		5.4
    MediumCVE-2024-1642

    MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk

    		4.3
    HighCVE-2023-23659

    WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    		4.3
    MediumCVE-2023-6164

    MainWP Dashboard <= 4.5.1.2 - Authenticated (Administrator+) CSS Injection

    		2.2

    Products

    Products by MainWP
    MainWP Child50
    Mainwp Child Reports50
    MainWP Dashboard30
    Mainwp Dashboard: Self-hosted Wordpress Management For Agencies30