ManageWP Worker, 789a6ab801477af9ad5fe7f355a0f14114bd6d5f

CVE, Research URL: 789a6ab801477af9ad5fe7f355a0f14114bd6d5f
Home page URL: Security reports for ManageWP Worker
Application: ManageWP Worker
Published on: Feb 11, 2020
Research Description: ManageWP Worker [worker] < 4.9.3 Manage WP Worker <= 4.9.2 - Authentication Bypass The Manage WP Worker plugin for WordPress is vulnerable to authentication bypass in versions up to, and including 4.9.2, due to the use of global keys that every installation of Manage WP worker uses for signature verification. This makes it possible to specially craft a request that can be used to auto-login as any user on any WordPress site running the plugin.
Affected versions: Min -, max 4.9.3.
Status: vulnerable