Watchtowerhq

5 CVEs across 2 Watchtowerhq products. Browse Watchtowerhq vulnerabilities, severities, and proof-of-concept exploits.

Watchtowerhq products with known CVEs

ProductCVEs
Watchtower3
Watchtowerhq2
Watchtowerhq CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-13972Medium4.92025-12-12The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the 'wht_download_big_object_origin' parameter in all versions up to, and includ…
CVE-2024-9933Critical9.82024-10-26The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token…
CVE-2023-25701Critical9.82024-05-17Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16.
CVE-2022-44584Critical9.12022-11-18Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.
CVE-2022-44583High7.52022-11-18Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.