ManageWP Worker
worker
Vulnerabilities:
3
Last Updated:
August 21, 2026
Active Installs:
1000000
Published
Title
Fixed in
CVSS
Published
2026-08-20
Title
ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters
Fixed in
Fixed in 4.9.37
CVSS
8.1 (high)
Published
2026-05-13
Title
ManageWP Worker < 4.9.32 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header
Fixed in
Fixed in 4.9.32
CVSS
7.2 (high)
Published
2026-04-13
Fixed in
Fixed in 4.9.32
CVSS
7.2 (high)
WPScan 