Wavethrough vulnerability