MainWP MainWP Child Reports

• CVE-2026-4299 Medium 5.3 MainWP Child Reports <= 2.2.6 - Missing Authorization to Authenticated (Subscriber+) Information Disclosure via Heartbeat API 0.6%
• CVE-2024-7492 High 8.8 MainWP Child Reports <= 2.2 - Cross-Site Request Forgery to Arbitrary Options Update 0.3%
• CVE-2024-33680 Medium 5.4 WordPress MainWP Child Reports plugin <= 2.1.1 - Cross Site Request Forgery (CSRF) vulnerability 0.2%