AmentoTech Private vulnerabilities
We track 4 vulnerabilities in AmentoTech Private products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on October 22, 2025.
Latest AmentoTech Private vulnerabilities
- 8.2 High severity
WPGuppy: Missing Authorization
Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPGuppy: from n/a through <= 1.1.4.
- 8.5 High severity
WPGuppy: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows SQL Injection.This issue affects WPGuppy: from n/a through <= 1.1.3.
- 8.8 High severity
WPGuppy: Incorrect Privilege Assignment
Incorrect Privilege Assignment vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Privilege Escalation.This issue affects WPGuppy: from n/a through <= 1.1.0.
- 9.8 Critical severity
WPGuppy: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Object Injection.This issue affects WPGuppy: from n/a through <= 1.1.0.