CVE-2026-39463

14th percentile - higher than 14% of all known CVEs

There is an unauthenticated Cross Site Scripting (XSS) vulnerability in ManageWP Worker versions <= 4.9.31. An attacker can exploit this flaw to inject malicious scripts in the user's context.

This vulnerability may lead to user data theft and session hijacking, posing a serious threat to the application's security and the organization's data.

It is recommended to update ManageWP Worker to the latest version to mitigate this vulnerability and conduct a security audit of the application.