What’s Vulnerable › Products

ManageWP Worker vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your ManageWP Worker version is affected

Latest ManageWP Worker vulnerabilities

• CVE-2026-39463 — WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-3718 — ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header (CVSS 7.2)