Skip to content
PluginCanary

ManageWP Worker

by ManageWP · 1,000,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: vulnerability published 25 Aug 2026, fixed in 4.9.37.

82/ 100 Canary Score
Sub-scores for ManageWP Worker
Ownership100
Maintenance100
Security70
Support70
Reputation60

How the score works

Active signals

Facts we detected, with links to the source.

  • WarningSEC-1Vulnerability published 25 Aug 2026, fixed in 4.9.37. Update to version 4.9.37 or later.25 Aug 2026Evidence
  • InfoSEC-33 vulnerabilities published in the last 24 months. Review this plugin.4 Nov 2026Evidence
  • InfoMOM-2Downloads in the last 4 weeks are down more than half vs the 26-week average. Review this plugin.4 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
freediver10 Mar 2011 to 15 May 2024, 337 commits
ManageWP24 Apr 2025 to 2 Nov 2026, 19 commits

2 committers recorded. No ownership changes recorded since 3 Nov 2026.

Maintenance

Last release
2 days ago
Releases, 24 months
18
Tested up to
7.1 current
Requires PHP
not stated supported 8.2+
Releases per quarter for ManageWP Worker
Q1 20241
Q2 20241
Q3 20240
Q4 20240
Q1 20250
Q2 20252
Q3 20251
Q4 20252
Q1 20266
Q2 20262
Q3 20264
Q4 20261

Last release 2 Nov 2026. Tested with WordPress 7.1 (current).

Support

0% of 1 support threads resolved in the last 2 months.

Security record

PublishedIssueCVSSAffectedFixed inDays to patch
25 Aug 2026ManageWP Worker < 4.9.37 - Authentication Bypass9.8< 4.9.374.9.370
13 May 2026ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting via 'MWP-Key-Name' Header7.2<= 4.9.314.9.320
13 Apr 2026ManageWP Worker <= 4.9.31 - Unauthenticated Stored Cross-Site Scripting7.2<= 4.9.314.9.320
11 Feb 2020Manage WP Worker <= 4.9.2 - Authentication Bypass9.8<= 4.9.24.9.3n/a

Source: Wordfence Intelligence.

Reputation

Average rating per quarter for ManageWP Worker
Q2 20242.3
Q3 20245.0
Q4 20245.0
Q1 20253.4
Q2 20255.0
Q3 20251.0
Q4 20255.0
Q1 20265.0
Q3 20264.0
Q4 20261.0

Average rating fell from 2.3 to 1.0 between Q2 2024 and Q4 2026.

Rating distribution
5 star603
4 star11
3 star8
2 star7
1 star50
Latest low reviews

Momentum

1,000,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for ManageWP Worker
4 May 20268,752
11 May 2026275,956
18 May 202649,828
25 May 202619,371
1 Jun 202617,880
8 Jun 202616,151
15 Jun 202615,470
22 Jun 202614,547
29 Jun 202614,211
6 Jul 202613,812
13 Jul 2026266,493
20 Jul 202634,243
27 Jul 202623,006
3 Aug 202619,672
10 Aug 202617,043
17 Aug 2026964,650
24 Aug 202692,145
31 Aug 202625,662
7 Sep 202619,165
14 Sep 202633,897
21 Sep 202623,901
28 Sep 202615,012
5 Oct 202614,796
12 Oct 202612,944
19 Oct 202617,539
26 Oct 202615,965
2 Nov 2026110,910

Weekly downloads over the last 4 weeks are 51% below the 27-week average.

Healthier alternatives

Same category, higher Canary Score. Never sponsored.

WP Rollback - Rollback Plugins and ThemesScore 92 · 200,000+Easy Updates ManagerScore 91 · 300,000+WP Downgrade | Specific Core VersionScore 91 · 100,000+Cloudways Site ManagerScore 91 · 50,000+The WP Remote WordPress PluginScore 91 · 30,000+

Facts

Version4.9.39
AuthorManageWP
Added10 Mar 2011
Last updated2 Nov 2026
Active installs1,000,000+
Requires WordPress3.1
Tested up to7.1.4
Requires PHPnot stated
CategorySite Administration & Utilities > Site Migration & Cloning
Tagsbackup, migrate, security, performance, Manage Multiple Sites

Questions

Is ManageWP Worker still maintained?

ManageWP Worker was last updated on 2 Nov 2026. Its Canary status is Healthy.

Is ManageWP Worker safe?

ManageWP Worker has no open unpatched vulnerabilities on record. 3 vulnerabilities were published in the last 24 months. Its Canary status is Healthy.

Who owns ManageWP Worker?

The wordpress.org author is ManageWP. Recent committers: ManageWP, freediver, plugin-master. We have recorded no ownership change.

What can I use instead of ManageWP Worker?

Plugins in the same category with a higher Canary Score: WP Rollback - Rollback Plugins and Themes, Easy Updates Manager, WP Downgrade | Specific Core Version, Cloudways Site Manager, The WP Remote WordPress Plugin.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews, Wordfence Intelligence.Plugin data refreshed 3 Nov 2026.Report a data issue