CVE-2022-44584

Unauth. Arbitrary File Deletion vulnerability in WatchTowerHQ plugin <= 3.6.15 on WordPress.

Score

CVSS 3.1 9.1 Critical

Status

Modified - audit@patchstack.com

Published

2022-11-18

Last modified

2026-04-28

Affected products

• Watchtower (Watchtowerhq)
• Watchtowerhq Wordpress Plugin (Whatarmy)

References

• https://patchstack.com/database/vulnerability/watchtowerhq/wordpress-watchtowerhq-plugin-3-6-15-unauth-arbitrary-file-d…
• https://wordpress.org/plugins/watchtowerhq/#developers