WordPress plugin
MainWP Child Reports security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 4 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High2
- Medium2
- Low0
All MainWP Child Reports vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Medium5.3 | Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API ≤2.2.6Update to 2.3 | CVE-2026-4299 | |
| High8.8 | Cross-Site Request Forgery to Arbitrary Options Update ≤2.2Update to 2.2.1 | CVE-2024-7492 | |
| Medium4.3 | Cross-Site Request Forgery ≤2.1.1Update to 2.2 | CVE-2024-33680 | |
| High7.2 | Admin+ SQL Injection ≤2.0.7Update to 2.0.8 | CVE-2021-24754 |
- Medium5.3Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API
≤2.2.6Update to 2.3
- High8.8Cross-Site Request Forgery to Arbitrary Options Update
≤2.2Update to 2.2.1
- Medium4.3Cross-Site Request Forgery
≤2.1.1Update to 2.2
- High7.2Admin+ SQL Injection
≤2.0.7Update to 2.0.8
MainWP Child Reports: common questions
Does MainWP Child Reports have known vulnerabilities?
Yes. VulnCrest Radar lists 4 known vulnerabilities in MainWP Child Reports: 2 high, 2 medium. None are known to affect version null.
How do I check which version of MainWP Child Reports I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent MainWP Child Reports vulnerability?
CVE-2026-4299, published Apr 7, 2026: MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API. Severity: Medium (CVSS 5.3).
Is any MainWP Child Reports vulnerability listed in CISA KEV?
No. None of the known MainWP Child Reports vulnerabilities is currently listed in the CISA KEV catalog.