CVE-2023-3132 — MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 4.4.1.2

CVE	Vulnerability	Type	Severity	Affected	Fixed in	Published	Status
CVE-2023-3132	MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 4.4.1.2	Exposure of Sensitive Information to an Unauthorized Actor	High 7.5	< 4.4.1.2	4.4.1.2	2023-06-23	—

CVE-2023-3132

The MainWP Child plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.4.1.1 due to insufficient controls on the storage of back-up files. This makes it possible for unauthenticated attackers to extract sensitive data including the entire installations database if a backup occurs and the deletion of the back-up files fail.

Source: CVE.org

Scan your WordPress site free

No signup, no credit card — enter your URL and get a security report in seconds.

Run a free scan Get the plugin (free)