PT-2025-38835

Name of the Vulnerable Software and Affected Versions MantraBrain Ultimate Watermark versions through 1.1 Description An authorization issue exists in MantraBrain Ultimate Watermark due to incorrectly configured access control security levels. This allows exploitation of the system. Recommendatio...

CVE-2025-58845

Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: from n/a through = 1.6.10...

CVE-2025-58845

Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: from n/a through = 1.6.10...

CVE-2025-58845 WordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: from n/a through = 1.6.10...

CVE-2025-58845 WordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in ChrisHurst Bulk Watermark bulk-watermark allows Reflected XSS.This issue affects Bulk Watermark: from n/a through = 1.6.10...

CVE-2025-58845

CVE-2025-58845 affects WordPress Bulk Watermark plugin (versions up to 1.6.10). Description: CSRF vulnerability that allows reflected XSS. CVSS v3.1 base score 7.1 (HIGH); vector: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L. Connected sources do not specify a fixed patch version; no remediation details p...

WordPress Bulk Watermark Plugin <= 1.6.10 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Bulk Watermark versions = 1.6.10...

WordPress plugin Bulk Watermark 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

PT-2025-36184

Name of the Vulnerable Software and Affected Versions: ChrisHurst Bulk Watermark versions through 1.6.10 Description: The software contains a Cross-Site Request Forgery CSRF vulnerability that also allows Reflected Cross-Site Scripting XSS. Recommendations: At the moment, there is no information...

WordPress Pro Bulk Watermark plugin path traversal vulnerability

WordPress Pro Bulk Watermark plugin is an image watermark plugin designed for WordPress websites, mainly used to add custom watermarks to uploaded images in bulk, supporting text and image watermark types. A path traversal vulnerability exists in WordPress Pro Bulk Watermark plugin, which can be...

CVE-2025-4956

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0...

CVE-2025-4956 WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through 2.0...

CVE-2025-4956

CVE-2025-4956 affects the WordPress AA-Team/Pro Bulk Watermark Plugin (Pro Bulk Watermark Plugin) up to version 2.0. A path traversal flaw is triggered by the sequence "."/"../" or the extended form ".../...//", allowing traversal to sensitive files. Impact is confidentiality leakage as described...

WordPress plugin Pro Bulk Watermark 安全漏洞

WordPress Pro Bulk Watermark plugin is an image watermark plugin designed for WordPress websites, mainly used to add custom watermarks to uploaded images in bulk, supporting text and image watermark types. A path traversal vulnerability exists in WordPress Pro Bulk Watermark plugin, which can be...

PT-2025-35334

Name of the Vulnerable Software and Affected Versions: AA-Team Pro Bulk Watermark Plugin for WordPress versions through 2.0 Description: The AA-Team Pro Bulk Watermark Plugin for WordPress contains a path traversal flaw. The vulnerability allows attackers to traverse file paths using the...

CVE-2025-49405

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Favethemes Houzez allows PHP Local File Inclusion.This issue affects Houzez: from n/a before 4.1.4...

WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability

Path Traversal Vulnerability discovered by ch4r0n Patchstack Alliance in WordPress Theme Pro Bulk Watermark Plugin for WordPress versions = 2.0...

WordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 is vulnerable to Path Traversal

Software Pro Bulk Watermark Plugin for WordPress Type Theme Vulnerable versions = 2.0 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Path Traversal CVE CVE-2025-4956 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID cbe2badf404d Credits ch4r0n...

Coward: toward Practical Proactive Federated Backdoor Defense Via Collision-Based Watermark

Backdoor detection is currently the mainstream defense against backdoor attacks in federated learning FL, where malicious clients upload poisoned updates that compromise the global model and undermine the reliability of FL deployments. Existing backdoor detection techniques fall into two...

Hot-Swap MarkBoard: an Efficient Black-Box Watermarking Approach for Large-Scale Model Distribution

Recently, Deep Learning DL models have been increasingly deployed on end-user devices as On-Device AI, offering improved efficiency and privacy. However, this deployment trend poses more serious Intellectual Property IP risks, as models are distributed on numerous local devices, making them...