Managewp

9 CVEs across 2 Managewp products. Browse Managewp vulnerabilities, severities, and proof-of-concept exploits.

Managewp products with known CVEs

ProductCVEs
Broken Link Checker7
Managewp Worker2
Managewp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39463High7.12026-06-15Unauthenticated Cross Site Scripting (XSS) in ManageWP Worker <= 4.9.31 versions.
CVE-2026-3718High7.22026-05-14The ManageWP Worker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'MWP-Key-Name' HTTP request header in all versions up to, and inc…
CVE-2024-10903Medium4.72024-12-26The Broken Link Checker WordPress plugin before 2.4.2 does not validate a the link URLs before making a request to them, which could allow admin users to perfo…
CVE-2023-23737Critical9.32023-10-12Unauth. SQL Injection (SQLi) vulnerability in MainWP MainWP Broken Links Checker Extension plugin <= 4.0 versions.
CVE-2014-125105Low2.42023-06-05A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the f…
CVE-2022-3922Medium4.82022-12-28The Broken Link Checker WordPress plugin before 1.11.20 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
CVE-2022-2438High7.22022-09-06The Broken Link Checker plugin for WordPress is vulnerable to deserialization of untrusted input via the '$log_file' value in versions up to, and including 1.1…
CVE-2019-17207Medium5.42019-10-18A reflected XSS vulnerability was found in includes/admin/table-printer.php in the broken-link-checker (aka Broken Link Checker) plugin 1.11.8 for WordPress. T…
CVE-2019-16521Medium6.12019-10-16The broken-link-checker plugin through 1.11.8 for WordPress (aka Broken Link Checker) is susceptible to Reflected XSS due to improper encoding and insertion of…