Plugin icon

Query Wrangler

query-wrangler
Plugin closed

Vulnerabilities:

5

Last Updated:

August 10, 2026

Active Installs:

700

Published
Title
Fixed in
CVSS
Published
2026-08-19
Title
Query Wrangler < 1.5.58 - Authenticated (Subscriber+) Remote Code Execution
Fixed in
Fixed in 1.5.58
CVSS
8.8 (high)
Published
2026-08-15
Title
Query Wrangler < 1.5.58 - Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter
Fixed in
Fixed in 1.5.58
CVSS
8.8 (high)
Published
2026-07-22
Title
Query Wrangler < 1.5.58 - Missing Authorization
Fixed in
Fixed in 1.5.58
CVSS
4.3 (medium)
Published
2025-04-01
Title
Query Wrangler < 1.5.55 - Cross-Site Request Forgery
Fixed in
Fixed in 1.5.55
CVSS
4.3 (medium)
Published
2023-08-16
Title
Query Wrangler < 1.5.52 - Reflected XSS
Fixed in
Fixed in 1.5.52
CVSS
7.1 (high)