Watchtowerhq vulnerabilities

Products

• Watchtower 4
• Watchtowerhq 3

Newest

• watchtowerhq WatchTowerHQ <= 3.16.0 - Authenticated (Administrator+) Arbitrary File Read via 'wht_download_big_object_origin' Parameter CVE-2025-13972 4.9 MediumDecember 12, 2025
• watchtowerhq watchtower, watchtowerhq +1 more WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check CVE-2024-9933 Public exploit 9.8 CriticalOctober 26, 2024
• watchtowerhq watchtower, watchtowerhq +1 more WordPress WatchTowerHQ plugin <= 3.6.16 - Privilege Escalation CVE-2023-25701 9.8 CriticalMay 17, 2024
• watchtowerhq watchtower, whatarmy watchtowerhq (wordpress plugin) +1 more WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Download vulnerability CVE-2022-44583 7.5 HighNovember 18, 2022
• watchtowerhq watchtower, whatarmy watchtowerhq (wordpress plugin) +1 more WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability CVE-2022-44584 9.1 CriticalNovember 18, 2022