MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard, e7124958-4769-46df-9ddd-e645066d9151
- CVE, Research URL
- Home page URL
- Published on
- -
- Research Description
- MainWP Child – Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 3.4.5 MainWP Child <= 3.4.4 - Authentication Bypass Not authorized attacker could gain full control of target application if he knows the administrative user name. In case of openssl installed on the server then one request is enough and in case of md5 verification ~100k requests will do the job.
- Affected versions
-
max 3.4.5.
- Status
-
vulnerable