Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 25

Export CSV
CVE-2023-23660

WordPress MainWP Maintenance Extension Plugin <= 4.1.1 is vulnerable to SQL Injection

Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP MainWP Maintenance Extension plugin <= 4.1.1 versions.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Mainwp
Products
Mainwp Maintenance Extension
CVE-2023-23651

WordPress MainWP Google Analytics Extension Plugin <= 4.0.4 - SQL Injection vulnerability

Auth. (subscriber+) SQL Injection (SQLi) vulnerability in MainWP Google Analytics Extension plugin <= 4.0.4 versions.

CVSS 3.1 · 8.5 High EPSS < 1% KEV · Not listed
Vendors
Mainwp
Products
Mainwp Google Analytics Extension
CVE-2023-23639

WordPress MainWP Staging Extension Plugin <= 4.0.3 - Subscriber+ Arbitrary Plugin Activation Vulnerability

Missing Authorization vulnerability in MainWP MainWP Staging Extension.This issue affects MainWP Staging Extension: from n/a through 4.0.3.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Mainwp
Products
Staging Extension
CVE-2021-24877

MainWP Child < 4.1.8 - Admin+ SQL Injection

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed

CVSS 3.1 · 7.2 High EPSS 1.3% KEV · Not listed
Vendors
Mainwp
Products
Mainwp Child
CVE-2021-24754

MainWP Child Reports < 2.0.8 - Admin+ SQL Injection

The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue

CVSS 3.1 · 7.2 High EPSS 1.4% KEV · Not listed
Vendors
Mainwp
Products
Mainwp Child Reports