Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Mainwp Subscribe
Filtered by product Mainwp Child
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-24877 1 Mainwp 1 Mainwp Child 2021-11-26 6.0 MEDIUM 7.2 HIGH
The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed