Software intelligence

Mainwp Child vulnerabilities

8 tracked advisories · slug mainwp-child

Important: Mainwp Child appearing in this catalog does not mean your website is affected. Exposure depends on your installed version. How SiteRespond intelligence works

Tracked advisories

Latest advisory

23 June 2026

CISA KEV matches

In this WordPress feed

WordPress slug

mainwp-child

Plugin

What this means for Mainwp Child

This catalog lists 8 known advisories affecting Mainwp Child. The most recent was published on 23 June 2026. If you use this software, compare your installed version against the affected ranges on each advisory and update to a fixed release outside those ranges. SiteRespond Defence checks your actual installed version when the plugin is connected — listing here does not by itself mean your site is vulnerable.

Latest issues

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.1.1 - Missing Authorization
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 23 June 2026
MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
May allow a lower-privilege user to perform actions reserved for administrators.
Published 12 December 2024
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
This advisory describes a other issue in the affected software. Review the source advisory and your installed version to assess exposure.
Published 23 June 2023

Vulnerability types

Authentication bypass2
Privilege escalation1
SQL injection1
Cross-site scripting1

Authentication (inferred from titles)

Unauthenticated1
Authenticated0
Unspecified7

Advisory history

Known Mainwp Child advisories published by month.

Oct 25

Nov 25

Dec 25

Jan 26

Feb 26

Mar 26

Apr 26

May 26

Jun 26

Jul 26

Aug 26

Sept 26

All advisories

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.1.1 - Missing Authorization
CVE-2026-27366 · Published 23 June 2026
Affected versions: ≤ 6.1.1
MainWP Child <= 5.3.3 - Missing Authorization to Unauthenticated Privilege Escalation
CVE-2024-10783 · Published 12 December 2024
Affected versions: ≤ 5.3.3
MainWP Child <= 4.4.1.1 - Information Disclosure via Back-Up Files
CVE-2023-3132 · Published 23 June 2023
Affected versions: ≤ 4.4.1.1
MainWP Child <= 4.1.7.1 - SQL Injection via orderby, order Parameters
CVE-2021-24877 · Published 25 October 2021
Affected versions: < 4.1.8
MainWP Child < 3.4.5 - Authentication Bypass
No CVE assigned · Published 18 February 2018
Affected versions: < 3.4.5
MainWP Child <= 2.0.27 - Multiple Cross-Site Scripting
No CVE assigned · Published 7 September 2015
Affected versions: ≤ 2.0.27
MainWP Dashboard and MainWP Child <= 2.0.22 - Unspecified Vulnerability
No CVE assigned · Published 7 August 2015
Affected versions: ≤ 2.0.22
MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass
No CVE assigned · Published 9 March 2015
Affected versions: < 2.0.9.2

Check whether your installed version is affected

SiteRespond Defence matches your installed Mainwp Child version against this catalog when the Defence plugin is connected to your WordPress site.

Start SiteRespond Defence for WordPress — £29.99/monthScan your website