Vulnerabilities / MainWP Dashboard
MainWP Dashboard vulnerabilities
Advisories WPSec published for MainWP Dashboard: Self-hosted WordPress Management for Agencies. Other sources may list more. Its attack surface: MainWP Dashboard on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-14 | WPSEC-2026-0936 | MainWP Dashboard <= 6.2.2 - Authenticated (REST API Key Holder) Authentication Scope Bypass via Crafted Request URI | High 7.2 | 6.2.3 |
| 2026-10-14 | WPSEC-2026-0935 | MainWP Dashboard <= 6.2.2 - Insufficient Session Expiration via REST API Keys of Deleted or Removed Users | Medium 5.9 | 6.2.3 |
License: CC BY 4.0