Watchtowerhq vulnerabilities
We track 2 vulnerabilities in Watchtowerhq products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2024.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Watchtowerhq vulnerabilities
- 9.8 Critical severity
WatchTowerHQ: Authentication Bypass Using an Alternate Path or Channel
The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token' default value is empty, and the not empty check is missing in the 'Password_Less_Access::login' fun
- 9.8 Critical severity
WatchTowerHQ: Improper Privilege Management
Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16.