CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:L
What the vulnerability does
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3.
Explanation of Vulnerability in Simple Terms
MainWP Dashboard versions up to 4.4.3.3 contain a SQL injection vulnerability in a high-privilege function. An authenticated admin can craft malicious input to extract or modify database records. The vulnerability affects the site's database integrity and may expose sensitive information. Update to a version newer than 4.4.3.3 to remediate.
What an attacker can do
Read or modify database records via SQL injection if they have admin access.
Potential impact on your site
An admin account could be compromised to extract sensitive data or corrupt your site's database.
Conditions required to exploit
Attacker must have admin-level privileges on the MainWP Dashboard.
Key dates
External resources
Related vulnerabilities
