WatchMan-Site7 vulnerabilities
We track 1 vulnerability in WatchMan-Site7 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 2, 2026.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest WatchMan-Site7 vulnerabilities
- 9.9 Critical severity
WatchMan-Site7: Improper Control of Generation of Code
The WatchMan-Site7 WordPress plugin through 4.2.0 does not restrict access to its debugging console, which executes user-supplied PHP code, allowing any authenticated user, such as a subscriber, to run arbitrary code on the server.