Skip to content
OpenAdvisories

Vendor

thewebsitesupply

1 known vulnerabilities.

Products

GWD Conex 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.8
    CVE-2026-6663

    GWD Connect <= 2.9 - Unauthenticated Limited Code Execution via update_agent

    The GWD Connect plugin for WordPress is vulnerable to missing authorization to limited code execution in all versions up to, and including, 2.9. This is due to the plugin's standalone agent endpoints (gwd-backup.php and gwd-logs.php) not verifying authenticat…

    thewebsitesupply GWD Conex Web / CMS