Vendors / WhatArmy Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 1
Exploited now WhatArmy records in CISA KEV No WhatArmy vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0199 · Published 2024-10-26 · No fix listed CWE-288
Priority MEDIUM 47
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00909 · Published 2022-11-18 · No fix listed
Priority MEDIUM 44
Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00805 · Published 2024-05-17 · No fix listed CWE-269
Priority MEDIUM 40
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00804 · Published 2022-11-18 · No fix listed CWE-552
Priority LOW 23
The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the 'wht_download_big_object_origin' parameter in all versions up to, and including, 3.16.0.
CVSS 3.1 MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00513 · Published 2025-12-12 · No fix listed CWE-22
Open these records in search → All records by CVSS severity
3 1 1 0 0
THREATIST.IORead the docs