Filtered by vendor Mainwp Subscriptions
Filtered by product Mainwp Child Reports Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-33680 1 Mainwp 1 Mainwp Child Reports 2024-11-21 5.4 Medium
Cross-Site Request Forgery (CSRF) vulnerability in MainWP MainWP Child Reports.This issue affects MainWP Child Reports: from n/a through 2.1.1.
CVE-2021-24754 1 Mainwp 1 Mainwp Child Reports 2024-11-21 7.2 High
The MainWP Child Reports WordPress plugin before 2.0.8 does not validate or sanitise the order parameter before using it in a SQL statement in the admin dashboard, leading to an SQL injection issue