Vulnerabilities

TI-2023-10977 CVE-2023-25701 · GHSA-grw4-fg3f-pfjq

WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation

MEDIUM 44

Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00805 Published 2024-05-17 No fix listed CWE-269

TI-2022-21920 CVE-2022-44583 · GHSA-27q2-f36g-hmv6

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability

MEDIUM 40

Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00804 Published 2022-11-18 No fix listed CWE-552

TI-2022-21921 CVE-2022-44584 · GHSA-f8q5-rrg5-h693

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability

MEDIUM 47

Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00909 Published 2022-11-18 No fix listed

Vulnerabilities

Filters

WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability