WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
mainwp
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified
Slug
mainwp
Published
2016-04-29
Title
MainWP <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)
Slug
mainwp
Published
2023-10-20
Title
MainWP Dashboard < 4.5.1.3 - Authenticated(Administrator+) CSS Injection
Slug
mainwp
Published
2023-11-09
Title
MainWP < 4.4.3.4 - Authenticated (Administrator+) SQL Injection
Slug
mainwp
Published
2024-02-27
Title
MainWP Dashboard < 5.0 - Cross-Site Request Forgery via posting_bulk
Slug
mainwp-broken-links-checker-extension
Published
2023-01-18
Title
MainWP Broken Links Checker Extension <= 4.0 - Unauthenticated SQLi
Slug
mainwp-child
Published
2015-03-09
Title
MainWP Child <= 2.0.9.1 - Authentication Bypass
Slug
mainwp-child
Published
2015-08-08
Title
MainWP <= 2.0.22 - Unspecified
Slug
mainwp-child
Published
2018-02-28
Title
MainWP Child <= 3.4.4 - Authentication Bypass
Slug
mainwp-child
Published
2021-10-25
Title
MainWP Child < 4.1.8 - Admin+ SQL Injection
Slug
mainwp-child
Published
2023-06-23
Title
MainWP Child < 4.4.1.2 - Sensitive File Disclosure
Slug
mainwp-child
Published
2024-11-12
Title
MainWP Child < 5.3 - Authentication Bypass
Slug
mainwp-child-reports
Published
2021-09-20
Title
MainWP Child Reports < 2.0.8 - Admin+ SQL Injection
Slug
mainwp-child-reports
Published
2024-04-26
Title
MainWP Child Reports < 2.2 - Cross-Site Request Forgery
Slug
mainwp-child-reports
Published
2024-08-07
Title
MainWP Child Reports < 2.2.1 - Cross-Site Request Forgery to Arbitrary Options Update
Slug
mainwp-child-reports
Published
2026-04-07
Title
MainWP Child Reports < 2.3 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Stored XSS
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ PHP Objection Injection
Slug
mainwp-code-snippets-extension
Published
2023-01-18
Title
MainWP Code Snippets Extension < 4.0.3 - Subscriber+ Settings Update
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ SQLi
Slug
mainwp-google-analytics-extension
Published
2023-01-17
Title
MainWP Google Analytics Extension < 4.0.5 - Subscriber+ Settings Update
Slug
mainwp-maintenance-extension
Published
2023-01-17
Title
MainWP Maintenance Extension < 4.1.2 - Subscriber+ SQL Injection (SQLi)
Slug
mainwp-piwik-extension
Published
2023-01-17
Title
MainWP Matomo Extension < 4.0.5 - CSRF
Slug
maio-the-new-ai-geo-seo-tool
Published
2026-02-27
Title
MAIO – The new AI GEO / SEO tool <= 6.5.2 - Missing Authorization
Slug
majestic-before-after-image
Published
2025-10-03
Title
Majestic Before After Image < 2.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting