Jonathan Daggerhart vulnerabilities

Products

• Query Wrangler 4
• Widget Wrangler 1

Latest Jonathan Daggerhart CVEs

Newest publication first

1. CVE-2026-73992 WordPress Query Wrangler plugin <= 1.5.57 - Remote Code Execution (RCE) vulnerability

   Published 2026-08-20

   Critical·CVSS 9.9 EPSS 0.79%

   Subscriber Remote Code Execution (RCE) in Query Wrangler <= 1.5.57 versions.

2. CVE-2026-65491 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability

   Published 2026-07-23

   Medium·CVSS 4.3 EPSS 0.27%

   Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.

3. CVE-2026-25447 WordPress Widget Wrangler plugin <= 2.3.9 - Remote Code Execution (RCE) vulnerability

   Published 2026-03-25

   Critical·CVSS 9.1 EPSS 0.33%

   Improper Control of Generation of Code ('Code Injection') vulnerability in Jonathan Daggerhart Widget Wrangler widget-wrangler allows Code Injection.This issue affects Widget Wrangler: from n/a through <= 2.3.9.

4. CVE-2025-31779 WordPress Query Wrangler plugin <= 1.5.54 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2025-04-01

   Medium·CVSS 5.4 EPSS 0.21%

   Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler query-wrangler allows Cross Site Request Forgery.This issue affects Query Wrangler: from n/a through <= 1.5.54.

5. CVE-2023-30779 WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-08-16

   Medium·CVSS 6.1 EPSS 0.38%

   Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin <= 1.5.51 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.