cleantalk
Vulnerabilities and Security Researches

MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard, PSC-2026-64637

PSC, Research URL

PSC-2026-64637

Published on
Mar 30, 2026
Research Description
MainWP Child – Securely Connects to the MainWP Dashboard (v6.0.5) is a WordPress plugin designed to establish a secure connection between individual WordPress sites and a self-hosted MainWP Dashboard. This architecture allows centralized management of multiple websites, including updates, backups, monitoring, and content administration. Built for websites running on WordPress, the plugin acts as a controlled communication bridge between managed sites and the MainWP Dashboard. Due to its role in remote management and cross-site communication, MainWP Child operates in a highly sensitive security context. As a result, a comprehensive security audit of its codebase and communication mechanisms was conducted.
Affected versions
Min 6.0.5, max 6.0.5.
Status
SAFE & CERTIFIED