Watchtowerhq
2 CVEs across 2 Watchtowerhq products. Browse Watchtowerhq vulnerabilities, severities, and proof-of-concept exploits.
Watchtowerhq products with known CVEs
Watchtowerhq CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-13972 | Medium | 4.9 | 2025-12-12 | The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the 'wht_download_big_object_origin' parameter in all versions up to, and includ… |
CVE-2024-9933 | Critical | 9.8 | 2024-10-26 | The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token… |
CVE-2023-25701 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16. |
CVE-2022-44584 | Critical | 9.1 | 2022-11-18 | Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress. |
CVE-2022-44583 | High | 7.5 | 2022-11-18 | Unauth. Arbitrary File Download vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress. |