Skip to content
Noroxi

MainWP records

19 published records for vendor mainwp.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
63.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

19 records
  • CVE-2023-23656
    40Plan

    WordPress MainWP File Uploader Extension Plugin <= 4.1 - Unauthenticated Arbitrary File Upload Vulnerability

    CriticalCVSS 10.0No exploitEPSS 1%

    mainwp · mainwp file uploader extensionMar 26, 2024

  • CVE-2023-23645
    39Monitor

    WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 - Subscriber+ Arbitrary PHP Code Injection/Execution Vulnerability

    CriticalCVSS 9.9No exploitEPSS 1%

    mainwp · code snippets extensionMay 17, 2024

  • CVE-2023-23660
    35Monitor

    WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

    HighCVSS 8.8No exploitEPSS 1%

    mainwp · mainwp maintenance extensionJul 18, 2023

  • CVE-2023-23651
    35Monitor

    WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    mainwp · mainwp google analytics extensionOct 12, 2023

  • CVE-2024-7492
    35Monitor

    MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update

    HighCVSS 8.8No exploitEPSS 0%

    mainwp · mainwp childAug 7, 2024

  • CVE-2023-23639
    35Monitor

    WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    mainwp · staging extensionJun 9, 2024

  • CVE-2023-23640
    35Monitor

    WordPress MainWP UpdraftPlus Extension Plugin <= 4.0.6 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    mainwp · updraftplus extensionJun 9, 2024

  • CVE-2023-23659
    35Monitor

    WordPress MainWP Matomo Extension Plugin <= 4.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    mainwp · motomoFeb 23, 2023

  • CVE-2023-23649
    32Monitor

    WordPress MainWP Links Manager Extension Plugin <= 2.1 - Unauthenticated PHP Object Injection Vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    mainwp · mainwp links manager extensionMar 28, 2024

  • CVE-2023-3132
    30Monitor

    MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files

    HighCVSS 7.5No exploitEPSS 1%

    mainwp · mainwp childJun 26, 2023

  • CVE-2021-24754
    28Monitor

    MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    mainwp · mainwp child reportsOct 18, 2021

  • CVE-2021-24877
    28Monitor

    MainWP Child < 4.1.8 - Admin+ SQL Injection

    HighCVSS 7.2No exploitEPSS 1%

    mainwp · mainwp childNov 23, 2021

  • CVE-2016-15041
    24Monitor

    MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance Plugin <= 3.1.2 - Stored Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    mainwp · mainwp dashboardOct 16, 2024

  • CVE-2023-23650
    21Monitor

    WordPress MainWP Code Snippets Extension Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    mainwp · code snippets extensionMar 23, 2023

  • CVE-2023-22699
    21Monitor

    WordPress MainWP Wordfence Extension Plugin <= 4.0.7 - Subscriber+ Arbitrary Plugin Activation Vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    mainwp · mainwp wordfence extensionMar 25, 2024

  • CVE-2024-33680
    21Monitor

    WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    mainwp · mainwp child reportsApr 26, 2024

  • CVE-2023-38519
    19Monitor

    WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection

    MediumCVSS 4.9No exploitEPSS 1%

    mainwp · mainwp dashboardDec 20, 2023

  • CVE-2023-6164
    19Monitor

    MainWP Dashboard <= 4.5.1.2 - Authenticated(Administrator+) CSS Injection

    MediumCVSS 4.8No exploitEPSS 0%

    mainwp · mainwpNov 22, 2023

  • CVE-2024-1642
    17Monitor

    MainWP Dashboard <= 4.6.0.1 - Cross-Site Request Forgery via posting_bulk

    MediumCVSS 4.3No exploitEPSS 0%

    mainwp · mainwp dashboardMar 13, 2024