CVE-2022-44584 - WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability

CRITICAL

WordPress WatchTowerHQ plugin <= 3.6.15 - Unauth. Arbitrary File Deletion vulnerability

Published Nov 18, 2022

9.1

CRITICAL

CVSS 3.1

EPSS 0.89%

Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
<= 3.6.15	affected	<=3.6.15

Vendor solution

Update to 3.6.16 or higher version.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-deletion-vulnerability?_s_id=cve		Third Party Advisory
https://wordpress.org/plugins/watchtowerhq/#developers		Release NotesThird Party Advisory