ManageWP
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| ManageWP Worker | 2 | – | Jun 15, 2026 |
Exploited and recent CVEs
- CVE-2026-39463 WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2026-3718 ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header 0.3%