Jonathan Daggerhart
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Query Wrangler | 4 | – | Aug 20, 2026 |
| Widget Wrangler | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2026-73992 WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability 0.8%
- CVE-2026-65491 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability 0.3%
- CVE-2026-25447 WordPress Widget Wrangler plugin <= 2.3.9 - Remote Code Execution (RCE) vulnerability 0.3%
- CVE-2025-31779 WordPress Query Wrangler plugin <= 1.5.54 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2023-30779 WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS) 0.4%