ManageWP Worker vulnerabilities
We track 1 vulnerability in ManageWP Worker products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 22, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest ManageWP Worker vulnerabilities
- 8.1 High severity
ManageWP Worker: Improper Authentication
The ManageWP Worker WordPress plugin before 4.9.37 does not bind the account being logged in to the signature which authorises the login, nor prevent an already used login link from being replayed, allowing attackers who obtain such a link to gain a session as