WordPress Plugin Vulnerabilities

MainWP <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting (XSS)

Description

The MainWP Dashboard – The WordPress Manager for Professional Website Maintenance WordPress plugin was affected by an Unauthenticated Stored Cross-Site Scripting (XSS) security vulnerability.

Affects Plugins

Plugin icon
mainwp
Fixed in 3.1.3

References

URL
https://klikki.fi/adv/mainwp.html

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
ethicalhack3r
Submitter twitter
ethicalhack3r
Verified
No
WPVDB ID
e9bce607-21bb-4ebd-af90-dcacb73f77c9

Timeline

Publicly Published
2016-04-29 (about 10 years ago)
Added
2016-05-03 (about 10 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-10-06
Title
Flatsome < 3.20.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2025-02-21
Title
WPYog Documents < 1.3.6 - Reflected Cross-Site Scripting
Published
2024-07-18
Title
Gutenberg Blocks with AI by Kadence WP < 3.2.53 - Contributor+ Stored XSS
Published
2025-04-04
Title
Contact Form Builder by vcita < 4.10.5 - Contributor+ Stored XSS
Published
2025-07-23
Title
Supreme Addons for Beaver Builder <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via auto_qrcodesabb Shortcode