Extension WordPress
Vulnérabilités MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites
Cette page rassemble les failles publiées pour MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites
8 fiches
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.1.1 – Missing Authorization
The MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 6.1.1.…
*-6.1.1
6.1.2
23/06/2026
MainWP Child <= 5.3.3 – Missing Authorization to Unauthenticated Privilege Escalation
The MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites plugin for WordPress is vulnerable to privilege escalation due to a missing authorization checks on the register_site function in all versions up to, and…
*-5.3.3
5.3.4
12/12/2024
MainWP Child <= 4.4.1.1 – Information Disclosure via Back-Up Files
The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files. This makes it possible for unauthenticated attackers to extract…
*-4.4.1.1
4.4.1.2
23/06/2023
MainWP Child <= 4.1.7.1 – SQL Injection via orderby, order Parameters
The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup…
[*, 4.1.8)
4.1.8
25/10/2021
MainWP Child < 3.4.5 – Authentication Bypass
The MainWP Child plugin for WordPress is vulnerable to authentication bypass due to insufficient validation on the check_login function in versions up to, and including, 3.4.4. This makes it possible for attackers to become administrative users and take…
[*, 3.4.5)
3.4.5
18/02/2018
MainWP Child <= 2.0.27 – Multiple Cross-Site Scripting
The MainWP Child plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 2.0.27 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that…
*-2.0.27
2.0.28
07/09/2015
MainWP Dashboard and MainWP Child <= 2.0.22 – Unspecified Vulnerability
Unspecified vulnerability in the MainWP Dashboard and MainWP Child plugins in versions up to and including 2.0.22 for WordPress has unspecified impact and remote attack vectors.
*-2.0.22
2.0.23
07/08/2015
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 – Authentication Bypass
The MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.9.1. This is due to a missing credential check within the…
[*, 2.0.9.2)
2.0.9.2
09/03/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.