cleantalk
Vulnerabilities and Security Researches

MainWP Child – Securely Connects Sites to the MainWP WordPress Manager Dashboard, e7124958-4769-46df-9ddd-e645066d9151

Published on
-
Research Description
MainWP Child &#8211; Securely Connects to the MainWP Dashboard to Manage Multiple Sites [mainwp-child] < 3.4.5 MainWP Child &lt;= 3.4.4 - Authentication Bypass Not authorized attacker could gain full control of target application if he knows the administrative user name. In case of openssl installed on the server then one request is enough and in case of md5 verification ~100k requests will do the job.
Affected versions
max 3.4.5.
Status
vulnerable