Daggerhart vulnerabilities
We track 1 vulnerability in Daggerhart products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Daggerhart vulnerabilities
- 8.8 High severity
Query Wrangler: Unrestricted Upload of File with Dangerous Type
The Query Wrangler plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.5.57 via the 'options' parameter parameter. This is due to missing capability check and nonce verification on the wp_ajax_qw_form_ajax handle