High
CVE-2026-105436
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 13
Reset filters
Medium
CVE-2026-27366
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.1.1 - Missing Authorization
Medium
CVE-2026-4299
MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API
High
CVE-2024-10783
MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
High
CVE-2024-7492
MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-33680
MainWP Child Reports <= 2.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-3132
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
High
CVE-2021-24877
MainWP Child <= 4.1.7.1 - SQL Injection via orderby, order Parameters
High
CVE-2021-24754
MainWP Child Reports <= 2.0.7 - Admin+ SQL Injection
High
f83f878d-b708-4677-929a-e1ced535d99f
MainWP Child < 3.4.5 - Authentication Bypass
Medium
a5a34838-fdc5-4954-9576-abf81cbaac2e
MainWP Child <= 2.0.27 - Multiple Cross-Site Scripting
High
71d63f0d-ce01-489e-bcc4-7632f1a4bb04
MainWP Dashboard and MainWP Child <= 2.0.22 - Unspecified Vulnerability
Critical
84019c69-32fd-4331-95d7-53ea1aaff616
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.