Skip to content
OpenAdvisories

Vendor

watchtowerhq

2 known vulnerabilities.

Products

WatchTowerHQ 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2024-9933 Public exploit

    WatchTowerHQ <= 3.10.1 - Authentication Bypass to Administrator due to Missing Empty Value Check

    The WatchTowerHQ plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.10.1. This is due to the 'watchtower_ota_token' default value is empty, and the not empty check is missing in the 'Password_Less_Access::login' fu…

    watchtowerhq WatchTowerHQ Web / CMS