Plugin icon

WatchTowerHQ

watchtowerhq

Vulnerabilities:

4

Last Updated:

January 8, 2026

Active Installs:

70

Published
Title
Fixed in
CVSS
Published
2025-12-11
Title
WatchTowerHQ < 3.16.1 - Authenticated (Administrator+) Arbitrary File Read via 'wht_download_big_object_origin' Parameter
Fixed in
Fixed in 3.16.1
CVSS
4.9 (medium)
Published
2024-10-25
Title
WatchTowerHQ < 3.10.4 - Authentication Bypass to Administrator due to Missing Empty Value Check
Fixed in
Fixed in 3.10.4
CVSS
9.8 (critical)
Published
2022-11-01
Title
WatchTowerHQ < 3.6.16 - Unauthenticated Arbitrary File Access
Fixed in
Fixed in 3.6.16
CVSS
7.5 (high)
Published
2022-11-01
Title
WatchTowerHQ < 3.6.16 - Unauthenticated Arbitrary File Deletion
Fixed in
Fixed in 3.6.16
CVSS
9.1 (critical)