MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard, 78e6ba639f1e8c5367e32db28a7f3caaf96a6000
- CVE, Research URL
- Home page URL
- Published on
- Mar 09, 2015
- Research Description
- MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 2.0.9.2 MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard < 2.0.9.2 - Authentication Bypass The MainWP Child – Securely connects sites to the MainWP WordPress Manager Dashboard plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.9.1. This is due to a missing credential check within the WordPress init hook. This makes it possible for unauthenticated attackers to log in as any user, including administrator-level accounts, if the attacker knows the username.
- Affected versions
-
max 2.0.9.2.
- Status
-
vulnerable