01 Record

CVE-2026-18052

ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters

UnratedPUBLISHEDCNA: WPScan

Base scoreUnratedNo CVSS vector published

02 Description

ManageWP Worker < 4.9.37 - Unauthenticated Authentication Bypass via Unsigned Auto-Login Parameters

Published: 2026-08-22 06:00Z1 HR AGO
Last updated: 2026-08-22 06:00Z1 HR AGO
Reserved: 2026-07-28
Assigning CNA: WPScan
Record state: PUBLISHED
Severity: Unrated: no CVSS score published
CVSS vector: Not published
Weaknesses: No CWE assigned
SSVC decision: No CISA-ADP assessment
Data version: 5.2
Document digest: 01e3eae25a07dcf7ed73d3745cbd904b00a57da2cd901fff9d0f3806ff11b69e

VendorProductVersionsPlatforms

UnknownManageWP Worker0 to < 4.9.37—