ManageWP vulnerabilities
We track 1 vulnerability in ManageWP products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.
1vulnerabilities
0critical
1high
0exploited
7.2average CVSS score
Latest ManageWP vulnerabilities
- 7.2 High severity
ManageWP Worker: Improper Neutralization of Input During Web Page Generation
The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and including, 4.9.31. This is due to insufficient input sanitization and output escaping of attacker-contro