CVE Database /
CVE-2023-3132
CVE · High
CVE-2023-3132 — MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 4.4.1.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-3132
|
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 4.4.1.2 |
Exposure of Sensitive Information to an Unauthorized Actor |
High
7.5
|
< 4.4.1.2
|
4.4.1.2 |
2023-06-23 |
—
|
CVE-2023-3132
The MainWP Child plugin through version 4.4.1.1 contains a sensitive information exposure vulnerability caused by inadequate safeguards protecting backup files. If a backup is created and fails to delete properly, unauthenticated attackers can access and download these files, potentially obtaining the complete database and other sensitive installation data. The vulnerability was resolved in version 4.4.1.2.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings