Query Wrangler

Query Wrangler has 5 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2026; all 5 are fixed as of September 2026. Their average CVSS score is 6.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 3 disclosures.

The most common weakness is Code Injection, behind 1 of the records (20%). Other recurring categories include Cross-Site Request Forgery (CSRF), Cross-Site Scripting.

Every one of the 5 issues recorded for Query Wrangler has a vendor fix available, so running the current release closes all known holes.

5 independent researchers contributed these findings, one record each.

Strategic Overview

Avg CVSSMedium

6.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Query Wrangler vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-73992

Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution

Read the full analysis

Vulnerability Records

5 records


2026-08-19 00:00	Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution Query Wrangler <= 1.5.57	`CVE-2026-73992`	8.8 High	hhhai	Yes
2026-08-15 16:17	Query Wrangler <= 1.5.57 - Authenticated (Subscriber+) Remote Code Execution via 'options' Parameter Query Wrangler <= 1.5.57	`CVE-2026-14498`	8.8 High	Enis	Yes
2026-07-22 00:00	Query Wrangler <= 1.5.57 - Missing Authorization Query Wrangler <= 1.5.57	`CVE-2026-65491`	4.3 Medium	Que Thanh Tuan	Yes
2025-04-01 00:00	Query Wrangler <= 1.5.54 - Cross-Site Request Forgery Query Wrangler <= 1.5.54	`CVE-2025-31779`	4.3 Medium	Skalucy	Yes
2023-04-19 00:00	Query Wrangler <= 1.5.51 - Reflected Cross-Site Scripting via page parameter Query Wrangler <= 1.5.51	`CVE-2023-30779`	6.1 Medium	LEE SE HYOUNG	Yes

Showing 1–5 of 5 reports