cleantalk
Vulnerabilities and Security Researches

MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard, 616cec93d1e1a764d8c41e21c7de3acf2377dd0b

Published on
Mar 09, 2015
Research Description
MainWP Child &#8211; Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 2.0.9.2 WordPress MainWP Child Plugin <= 2.0.9.1 - Authentication Bypass Because of this vulnerability, anyone can log in as an administrator just by knowing the target user’s handle (password bypass). Update this plugin.
Affected versions
max 2.0.9.2.
Status
vulnerable