MultiManager WP – Manage All Your WordPress Sites Easily
MultiManager WP – Manage All Your WordPress Sites Easily has one disclosed vulnerability in the WordSec catalog, all reported in 2024; it is fixed as of September 2026. Their average CVSS score is 9.8, and the most serious one scores 9.8 out of 10. Severity breakdown: 1 critical and 0 high.
The most common weakness is Authentication Bypass Using An Alternate Path Or Channel, behind 1 of the records (100%).
The one issue recorded for MultiManager WP – Manage All Your WordPress Sites Easily has a vendor fix available, so running the current release closes it.
All of these findings were reported by shaman0x01. MultiManager WP – Manage All Your WordPress Sites Easily is installed on roughly 2,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2024-11028MultiManager WP – Manage All Your WordPress Sites Easily <= 1.0.5 - Authentication Bypass via User Impersonation
Read the full analysisVulnerability Records
MultiManager WP – Manage All Your WordPress Sites Easily
Author
icdsoft
This plugin helps you to automatically connect your WordPress site to the ICDSoft WordPress MultiManager toolkit available in the ICDSoft Account Panel. The WordPress MultiManager toolkit allows you to add and manage multiple WordPress sites from a single interface. The WP MultiManager plugin opens the following custom REST-API methods: users/ users/impersonate users/impersonate/nonce users/impersonate/token plugins/ plugins/upload plugins/update plugins/updates themes/ themes/installed themes/install themes/update themes/updates core/ core/update.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C