← Back

Watcheezy

watcheezy

Vendor: Targetfirst • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-24305
1Targetfirst
1Watcheezy
Jun 17, 2026
May 24, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a POST on any URL with...Show more
The Target First WordPress Plugin v2.0, also previously known as Watcheezy, suffers from a critical unauthenticated stored XSS vulnerability. An attacker could change the licence key value through a POST on any URL with the 'weeWzKey' parameter that will be save as the 'weeID option and is not sanitized.Show less