All 4 CVE vulnerabilities found in MainWP Child Reports, with AI-generated Chinese analysis, references, and POCs.
Vendor: Unknown
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-4299 | MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API CWE-862 | 5.3 | Medium | 2026-04-08 |
| CVE-2024-7492 | MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update CWE-352 | 8.8 | High | 2024-08-08 |
| CVE-2024-33680 | WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 | 5.4 | Medium | 2024-04-26 |
| CVE-2021-24754 | MainWP Child Reports < 2.0.8 - Admin+ SQL Injection CWE-89 | 7.2 | - | 2021-10-18 |
All 4 known CVE vulnerabilities affecting MainWP Child Reports with full Chinese analysis, references, and POCs where available.