https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2016-15041.htmlhttps://patchthecve.com/cve/CVE-2016-15041.htmlWed, 17 Jun 2026 00:41:03 +0000HIGH 7.2: The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. https://patchthecve.com/cve/CVE-2024-1642.htmlhttps://patchthecve.com/cve/CVE-2024-1642.htmlWed, 17 Jun 2026 07:04:41 +0000MEDIUM 4.3: The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.6.0.1. This is due to missing or incorrect nonce validation on the 'posting_bulk' function. This makes it possible for https://patchthecve.com/cve/CVE-2023-38519.htmlhttps://patchthecve.com/cve/CVE-2023-38519.htmlWed, 17 Jun 2026 06:10:38 +0000HIGH 7.6: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in MainWP MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance.This issue affects MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance: from n/a through 4.4.3.3.