Lucene search
K

8 matches found

NVD
NVD
added 2025/12/31 8:15 p.m.1 views

CVE-2025-28973

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

6.5CVSS0.00073EPSS
Exploits0References1
CVE
CVE
added 2025/12/31 8:2 p.m.21 views

CVE-2025-28973

Summary of CVE-2025-28973: The vulnerability is a Path Traversal flaw in the WordPress plugin “AA-Team Pro Bulk Watermark Plugin for WordPress” (also referred to as Pro Bulk Watermark Plugin for WordPress) affecting versions up to 2.0. The root cause is insufficient sanitization of user-supplied ...

6.5CVSS5.7AI score0.00073EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/12/31 8:2 p.m.23 views

CVE-2025-28973 WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through = 2.0...

6.5CVSS0.00073EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/08/30 12:0 a.m.2 views

WordPress plugin Pro Bulk Watermark 安全漏洞

WordPress Pro Bulk Watermark plugin is an image watermark plugin designed for WordPress websites, mainly used to add custom watermarks to uploaded images in bulk, supporting text and image watermark types. A path traversal vulnerability exists in WordPress Pro Bulk Watermark plugin, which can be...

4.3CVSS6.8AI score0.00106EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/08/30 12:0 a.m.3 views

PT-2025-35334

Name of the Vulnerable Software and Affected Versions: AA-Team Pro Bulk Watermark Plugin for WordPress versions through 2.0 Description: The AA-Team Pro Bulk Watermark Plugin for WordPress contains a path traversal flaw. The vulnerability allows attackers to traverse file paths using the...

4.3CVSS6.4AI score0.00106EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2025/08/28 12:37 p.m.2 views

CVE-2025-49405

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...

8.1CVSS5.3AI score0.00067EPSS
Exploits0References3
Patchstack
Patchstack
added 2025/08/25 12:23 p.m.5 views

WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability

Path Traversal Vulnerability discovered by ch4r0n Patchstack Alliance in WordPress Theme Pro Bulk Watermark Plugin for WordPress versions = 2.0...

4.3CVSS6.9AI score0.00106EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2025/07/10 12:0 a.m.6 views

WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 is vulnerable to Path Traversal

Software Pro Bulk Watermark Plugin for WordPress Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A3: Injection Classification Path Traversal CVE CVE-2025-28973 Patch priority High CVSS severity High 6.5 Developer Claim ownership PSID c40f943bba08 Credits Tran Nguyen Bao Khanh VCI -...

6.8AI score0.00073EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder