WordPress plugin
WatchMan-Site7 security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical0
- High1
- Medium0
- Low0
All WatchMan-Site7 vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High8.8 | Authenticated (Subscriber+) Remote Code Execution ≤4.2.0No patch available | CVE-2026-77009 |
- High8.8Authenticated (Subscriber+) Remote Code Execution
≤4.2.0No patch available
WatchMan-Site7: common questions
Does WatchMan-Site7 have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in WatchMan-Site7: 1 high. At least one is not fixed in the latest version.
How do I check which version of WatchMan-Site7 I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent WatchMan-Site7 vulnerability?
CVE-2026-77009, published Sep 1, 2026: WatchMan-Site7 <= 4.2.0 - Authenticated (Subscriber+) Remote Code Execution. Severity: High (CVSS 8.8).
Is any WatchMan-Site7 vulnerability listed in CISA KEV?
No. None of the known WatchMan-Site7 vulnerabilities is currently listed in the CISA KEV catalog.