TI-2026-51982 CVE-2026-73992 · GHSA-9gcp-fwvg-c9v7
WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability
Priority MEDIUM 44
Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.
Vulnerabilities
4 records
TI-2026-46661 CVE-2026-65491 · GHSA-qv9p-x543-gh36
WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
Priority LOW 20
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
TI-2026-20561 CVE-2026-25447 · GHSA-f7r3-8xgv-qxr2
WordPress Widget Wrangler plugin <= 2.3.9 - Remote Code Execution (RCE) vulnerability
Priority MEDIUM 41
Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects Widget Wrangler: from n/a through <= 2.3.9.
TI-2025-22916 CVE-2025-31779 · GHSA-hhqx-qxvc-gw42
WordPress Query Wrangler plugin <= 1.5.54 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 24
Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler query-wrangler allows Cross Site Request Forgery.This issue affects Query Wrangler: from n/a through <= 1.5.54.