CVE-2024-3754

🗓️ 14 Jun 2024 06:00:02Reported by WPScanType

cve🔗 web.nvd.nist.gov👁 51 Views🌐 WEB

The Alemha watermarker WordPress plugin vulnerabilit

Reporter	Title	Published	Views	Family All 10
CNNVD	WordPress plugin Alemha watermarker security vulnerability	14 Jun 202400:00	–	cnnvd
Cvelist	CVE-2024-3754 Alemha Watermarker <= 1.3.1 - Author+ Stored XSS	14 Jun 202406:00	–	cvelist
NVD	CVE-2024-3754	14 Jun 202406:15	–	nvd
Patchstack	WordPress Alemha Watermarker plugin <= 1.3.1 - Authenticated Stored Cross-Site Scripting vulnerability	24 May 202411:27	–	patchstack
Patchstack	WordPress Alemha watermarker Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)	24 May 202400:00	–	patchstack
Positive Technologies	PT-2024-27638 · WordPress · Alemha Watermarker	14 Jun 202400:00	–	ptsecurity
Vulnrichment	CVE-2024-3754 Alemha Watermarker <= 1.3.1 - Author+ Stored XSS	14 Jun 202406:00	–	vulnrichment
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (May 20, 2024 to May 26, 2024)	30 May 202415:23	–	wordfence
wpexploit	Alemha Watermarker <= 1.3.1 - Author+ Stored XSS	24 May 202400:00	–	wpexploit
WPVulnDB	Alemha Watermarker <= 1.3.1 - Author+ Stored XSS	24 May 202400:00	–	wpvulndb

NVD

Vulners

Node

mnbaa alemha_watermarkRange≤1.3.1wordpress

[
  {
    "vendor": "Unknown",
    "product": "Alemha watermarker",
    "versions": [
      {
        "status": "affected",
        "versionType": "semver",
        "version": "0",
        "lessThanOrEqual": "1.3.1"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/8c6f3e3e-3047-4446-a190-750a60c29fa3/

Parameter	Position	Path	Description	CWE
watermark_text	request body	/wp-admin/post-new.php?post_type=watermark	Stored XSS via watermark_text field due to inadequate sanitization/escaping in plugin settings	CWE-79

03 Jul 2025 16:27Current

4.5Medium risk

Vulners AI Score4.5

CVSS 3.14.7

EPSS0.00284

SSVC

CWE-79