What’s Vulnerable › Products

MainWP Child vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your MainWP Child version is affected

Latest MainWP Child vulnerabilities

• CVE-2026-105436 — WordPress MainWP Child plugin <= 6.2.1 - Deserialization of untrusted data vulnerability (CVSS 8.8)
• CVE-2026-27366 — WordPress MainWP Child plugin <= 6.1.1 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2024-10783 — MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation (CVSS 8.1)
• CVE-2024-7492 — MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update (CVSS 8.8)
• CVE-2023-3132 — MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files (CVSS 7.5)
• CVE-2021-24877 — MainWP Child < 4.1.8 - Admin+ SQL Injection (CVSS 7.2)