MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard, b30b040bed5fff76b548866fcb36373ce05819b7

CVE, Research URL: b30b040bed5fff76b548866fcb36373ce05819b7
Home page URL: Security reports for MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard
Application: MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard
Published on: Feb 18, 2018
Research Description: MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 3.4.5 MainWP Child < 3.4.5 - Authentication Bypass The MainWP Child plugin for WordPress is vulnerable to authentication bypass due to insufficient validation on the check_login function in versions up to, and including, 3.4.4. This makes it possible for attackers to become administrative users and take full control of the affected website.
Affected versions: max 3.4.5.
Status: vulnerable

MainWP Child &#8211; Securely Connects Sites to the MainWP WordPress Manager Dashboard, b30b040bed5fff76b548866fcb36373ce05819b7