https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 20:09:44 +0000 https://cve.radiocsirt.org/vuln/cve-2025-13972 <p><strong>Affected:</strong> WatchTowerHQ</p> <p>The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the &#39;wht_download_big_object_origin&#39; parameter in all versions up to, and including, 3.16.0. This is due to insufficient path validation in the handle_big_object_download_request function. This makes it possible for authenticated attackers, with administrator-level access and a valid access token, to read arbitrary files on the server, which can contain sensitive information such as database credentials and authentication keys.</p> <p><strong>Affected:</strong> WatchTowerHQ</p> <p>The WatchTowerHQ plugin for WordPress is vulnerable to arbitrary file read via the &#39;wht_download_big_object_origin&#39; parameter in all versions up to, and including, 3.16.0. This is due to insufficient path validation in the handle_big_object_download_request function. This makes it possible for authenticated attackers, with administrator-level access and a valid access token, to read arbitrary files on the server, which can contain sensitive information such as database credentials and authentication keys.</p> https://cve.radiocsirt.org/vuln/cve-2025-13972