CVE-2026-57327

The MainWP plugin for WordPress versions 6.1.1 and earlier contains a broken access control vulnerability exploitable by subscribers. A user with the subscriber role can gain unauthorized access to functions intended for administrators.

The risk involves potential privilege escalation by a subscriber, which could lead to unauthorized configuration changes or access to sensitive data.

It is recommended to immediately update the MainWP plugin to the latest available version that fixes this vulnerability. Also review permissions for users with the subscriber role.