Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
WhatArmy records in CISA KEVNo WhatArmy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 47
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00909 · Published 2022-11-18 · No fix listed
Priority MEDIUM 44
Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00805 · Published 2024-05-17 · No fix listed CWE-269
Priority MEDIUM 40
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00804 · Published 2022-11-18 · No fix listed CWE-552
