Extension WordPress
Vulnérabilités MainWP Dashboard: Self-hosted WordPress Management for Agencies
Cette page rassemble les failles publiées pour MainWP Dashboard: Self-hosted WordPress Management for Agencies, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de MainWP Dashboard: Self-hosted WordPress Management for Agencies
7 fiches
MainWP Dashboard: Self-hosted WordPress Management for Agencies <= 6.1.1 – Missing Authorization
The MainWP Dashboard: Self-hosted WordPress Management for Agencies plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 6.1.1. This makes it possible for authenticated…
*-6.1.1
6.1.2
29/06/2026
MainWP Dashboard <= 4.6.0.1 – Cross-Site Request Forgery via posting_bulk
The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.0.1. This is due to missing or incorrect nonce validation on the…
*-4.6.0.1
5.0
27/02/2024
MainWP <= 4.4.3.3 – Authenticated (Administrator+) SQL Injection
The MainWP plugin for WordPress is vulnerable to SQL Injection via the 'tags' parameter in versions up to, and including, 4.4.3.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing…
*-4.4.3.3
4.4.3.4
09/11/2023
MainWP Dashboard <= 4.5.1.2 – Authenticated(Administrator+) CSS Injection
The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in all versions up to, and including, 4.5.1.2 due to insufficient input sanitization. This makes it…
*-4.5.1.2
4.5.1.3
20/10/2023
MainWP Dashboard <= 4.2.4.1 – Cross-Site Request Forgery
The MainWP Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.2.4.1. This is due to missing nonce validation on the render() and render_restore() function. This makes it possible for unauthenticated…
*-4.2.4.1
4.2.5
21/06/2022
MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 – Stored Cross-Site Scripting
The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, and including, 3.1.2 due to insufficient input sanitization and…
[*, 3.1.3)
3.1.3
29/04/2016
MainWP Dashboard and MainWP Child <= 2.0.22 – Unspecified Vulnerability
Unspecified vulnerability in the MainWP Dashboard and MainWP Child plugins in versions up to and including 2.0.22 for WordPress has unspecified impact and remote attack vectors.
*-2.0.22
2.0.23
07/08/2015
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.