48 matches found
PT-2024-39948 · WordPress · Watchtowerhq
Name of the Vulnerable Software and Affected Versions: WatchTowerHQ plugin for WordPress versions up to, and including, 3.9.6 Description: The issue is related to authentication bypass. This is due to the watchtower ota token default value being empty and the missing not empty check in the Passwo...
WordPress WatchTowerHQ plugin <= 3.10.1 - Authentication Bypass vulnerability
Authentication Bypass vulnerability discovered by István Márton in WordPress Plugin WatchTowerHQ versions = 3.10.1...
WordPress WatchTowerHQ Plugin <= 3.10.1 is vulnerable to Broken Authentication
Software WatchTowerHQ Type Plugin Vulnerable versions = 3.10.1 Fixed in 3.10.4 OWASP Top 10 A7: Identification and Authentication Failures Classification Broken Authentication CVE CVE-2024-9933 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID 5b771d8428a0 Credits István...
CVE-2023-25701
Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16...
CVE-2023-25701 WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation
Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16...
CVE-2023-25701 WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation
Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16...
CVE-2023-25701
CVE-2023-25701 is a WordPress WatchTowerHQ plugin vulnerability (WatchTowerHQ
WordPress plugin WatchTowerHQ 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
WordPress WatchTowerHQ Plugin <= 3.6.16 is vulnerable to Privilege Escalation
Software WatchTowerHQ Type Plugin Vulnerable versions = 3.6.16 Fixed in 3.6.17 OWASP Top 10 A2: Broken Authentication Classification Privilege Escalation CVE CVE-2023-25701 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID d4d81217130b Credits Dave Jong Patchstack Required...
CVE-2022-44584
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44583
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44584
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44583
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
Arbitrary file deletion
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
Arbitrary file deletion
Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44583
CVE-2022-44583 affects WordPress via the WatchTowerHQ plugin (versions
CVE-2022-44583 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44583 WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability
Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin = 3.6.15 on WordPress...
CVE-2022-44584
CVE-2022-44584 affects WordPress WatchTowerHQ plugin up to version 3.6.15. The vulnerability stems from improper access control in the plugin’s REST API endpoints, allowing unauthenticated attackers to delete arbitrary files. Impact is described as unauthenticated arbitrary file deletion with hig...