Lucene search

K
wpvulndbWpvulndbWPVDB-ID:96C741C8-576A-45AC-AC55-DA2B37D77A13
HistoryNov 01, 2022 - 12:00 a.m.

WatchTowerHQ < 3.6.16 - Unauthenticated Arbitrary File Access

2022-11-0100:00:00
wpscan.com
9
watchtowerhq
unauthenticated access
arbitrary files
rest api
software security

EPSS

0.001

Percentile

48.7%

The plugin does properly check for the access token in its REST API endpoints, which could allow unauthenticated attackers to call them and download arbitrary files

EPSS

0.001

Percentile

48.7%

Related for WPVDB-ID:96C741C8-576A-45AC-AC55-DA2B37D77A13