Approved changes feed: RSS · Atom

cpe:2.3:a:jonathan_daggerhart:query_wrangler:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJonathan Daggerhart (001a8819-1543-5e7b-9789-832b93ad1e2c)
ProductQuery Wrangler (81469063-7327-56b7-a959-d739e0b5cbac)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-65491 vulnerable 2026-07-29 01:06:20.079275 WordPress Query Wrangler plugin <= 1.5.57 - Broken Access Control vulnerability
MEDIUM (4.3)
Subscriber Broken Access Control in Query Wrangler <= 1.5.57 versions.
Published: 2026-07-23T11:18:58.714Z
Updated: 2026-07-23T15:07:19.770Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31779 vulnerable 2026-06-08 07:18:58.559167 WordPress Query Wrangler plugin <= 1.5.54 - Cross Site Request Forgery (CSRF) vulnerability
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Jonathan Daggerhart Query Wrangler query-wrangler allows Cross Site Request Forgery.This issue affects Query Wrangler: from n/a through <= 1.5.54.
Published: 2025-04-01T14:51:24.164Z
Updated: 2026-04-28T16:12:12.661Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30779 vulnerable 2026-06-08 06:04:41.131593 WordPress Query Wrangler Plugin <= 1.5.51 is vulnerable to Cross Site Scripting (XSS)
HIGH (7.1)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jonathan Daggerhart Query Wrangler plugin <= 1.5.51 versions.
Published: 2023-08-16T10:05:00.575Z
Updated: 2026-04-28T16:08:19.638Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.