All 3 CVE vulnerabilities found in ManageWP Worker, with AI-generated Chinese analysis, references, and POCs.
Vendor: managewp
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-18052 | ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters | - | - | 2026-08-22 |
| CVE-2026-39463 | WordPress ManageWP Worker plugin <= 4.9.31 - Cross Site Scripting (XSS) vulnerability CWE-79 | 7.1 | High | 2026-06-15 |
| CVE-2026-3718 | ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header CWE-79 | 7.2 | High | 2026-05-14 |
All 3 known CVE vulnerabilities affecting ManageWP Worker with full Chinese analysis, references, and POCs where available.