Multiple Domain
Multiple Domain has one disclosed vulnerability in the WordSec catalog, all reported in 2020; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Multiple Domain has a vendor fix available, so running the current release closes it.
Multiple Domain is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 5.7.17.
Multiple Domain <= 1.0.2 - Cross-Site Scripting
Read the full analysisVulnerability Records
Multiple Domain
Author
Javik
Important: This plugin has a new maintainer. So the plugin will now be active developed again, and it’s now part of goINPUT. Multiple Domain allows you having more than one domain in a single WordPress installation. This plugin doesn’t support more than one theme or advanced customizations for each domain. It’s only intended to enable constant navigation under many domains. For a more complex setup, there is WordPress Multisite (MU). When there is more than one domain set in your host, all links and resources will point to the default domain. This is the default WordPress behavior. With Multiple Domain installed and properly configured, it’ll update all link on the fly. This way, the user navigation will be end-to-end under the same domain. You can also set an optional base URL. If you want only a set of URL’s available under a given domain, you can use this restriction. Additionally, a language can be set for each domain. The language will be used to add <link> tags with hreflang attribute to document head. This is for SEO purposes.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C