CVE-2021-24877

HIGH 7.2CVE-2021-24877 · Published 23/11/2021 · updated 17/06/2026

In short

CVE-2021-24877 is a HIGH (CVSS 7.2) vulnerability affecting mainwp child (mainwp).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.0% of all vulnerabilities.
Fix: update to 4.1.8 or later.

Package	Affected versions	Patched versions
mainwp child mainwp	`< 4.1.8`	`4.1.8`

Description

The MainWP Child WordPress plugin before 4.1.8 does not validate the orderby and order parameter before using them in a SQL statement, leading to an SQL injection exploitable by high privilege users such as admin when the Backup and Staging by WP Time Capsule plugin is installed

References

wpscan.com/vulnerability/b09fe120-ab9b-44f2-b50d-3b4b299d6d15 · Exploit

More vulnerabilities in mainwp child

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free