WordPress plugin

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites security & vulnerabilities

Q: Does MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites have known vulnerabilities?

Yes. VulnCrest Radar lists 9 known vulnerabilities in MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites: 1 critical, 5 high, 3 medium. None are known to affect version null.

Q: How do I check which version of MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerability?

CVE-2026-105436, published Oct 6, 2026: MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.2.1 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).

Q: Is any MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerability listed in CISA KEV?

No. None of the known MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerabilities is currently listed in the CISA KEV catalog.

mainwp-child— active installsLast vulnerability Oct 6, 2026

No known unpatched vulnerabilities in the latest version

All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

9Known vulnerabilities

Critical1
High5
Medium3
Low0

Vulnerabilities per year

All MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerabilities

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerabilities
Severity	Vulnerability	CVE	Published
High8.1	Unauthenticated PHP Object Injection ≤6.2.1Update to 6.2.2	CVE-2026-105436	Oct 06
High8.1	Missing Authorization to Unauthenticated Privilege Escalation ≤5.3.3Update to 5.3.4	CVE-2024-10783	Dec 12, 2024
High7.2	SQL Injection via orderby, order Parameters <4.1.8Update to 4.1.8	CVE-2021-24877	Oct 25, 2021
High8.3	Authentication Bypass <3.4.5Update to 3.4.5	—	Feb 18, 2018
High7.3	Unspecified Vulnerability ≤2.0.22Update to 2.0.23	—	Aug 7, 2015
Critical9.8	Authentication Bypass <2.0.9.2Update to 2.0.9.2	—	Mar 9, 2015

High8.1
Unauthenticated PHP Object Injection
≤6.2.1Update to 6.2.2
CVE-2026-105436Oct 06
High8.1
Missing Authorization to Unauthenticated Privilege Escalation
≤5.3.3Update to 5.3.4
CVE-2024-10783Dec 12, 2024
High7.2
SQL Injection via orderby, order Parameters
<4.1.8Update to 4.1.8
CVE-2021-24877Oct 25, 2021
High8.3
Authentication Bypass
<3.4.5Update to 3.4.5
f83f878d-b708-4677-929a-e1ced535d99fFeb 18, 2018
High7.3
Unspecified Vulnerability
≤2.0.22Update to 2.0.23
71d63f0d-ce01-489e-bcc4-7632f1a4bb04Aug 7, 2015
Critical9.8
Authentication Bypass
<2.0.9.2Update to 2.0.9.2
84019c69-32fd-4331-95d7-53ea1aaff616Mar 9, 2015

MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites: common questions

Does MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites have known vulnerabilities?

Yes. VulnCrest Radar lists 9 known vulnerabilities in MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites: 1 critical, 5 high, 3 medium. None are known to affect version null.

How do I check which version of MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerability?

CVE-2026-105436, published Oct 6, 2026: MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites <= 6.2.1 - Unauthenticated PHP Object Injection. Severity: High (CVSS 8.1).

Is any MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerability listed in CISA KEV?

No. None of the known MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites vulnerabilities is currently listed in the CISA KEV catalog.