CVE Database /
CVE-2026-27366
CVE · High
CVE-2026-27366 — MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 6.1.2
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2026-27366
|
MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 6.1.2 |
Missing Authorization |
High
7.5
|
< 6.1.2
|
6.1.2 |
2026-06-23 |
—
|
CVE-2026-27366
The MainWP Child plugin for WordPress, in versions up to and including 6.1.1, has a security flaw that allows unauthorized access to its functionality. Specifically, a missing capability check in one of its functions allows attackers who are not authenticated to perform certain actions. This vulnerability makes it possible for malicious users to carry out unauthorized actions without needing to log in.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings