WordPress plugin DX-Watermark 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site reques...

PT-2024-23490 · Unknown · 大侠Wp Dx-Watermark

Name of the Vulnerable Software and Affected Versions: 大侠WP DX-Watermark versions 1.0.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web application that...

WordPress Image Watermark plugin <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification vulnerability

Missing Authorization to Authenticated Subscriber+ Watermark Modification vulnerability discovered by Lucio Sá in WordPress Plugin Image Watermark versions = 1.7.3...

WordPress Image Watermark Plugin <= 1.7.3 is vulnerable to Broken Access Control

Software Image Watermark Type Plugin Vulnerable versions = 1.7.3 Fixed in 1.7.4 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-1994 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 790ca7ba3a40 Credits Lucio Sá Required privilege...

CVE-2024-1994

The Image Watermark plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the watermarkactionajax function in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with subscriber-level access and above...

CVE-2024-1994

CVE-2024-1994 affects the Image Watermark WordPress plugin; due to a missing capability check in watermark_action_ajax(), authenticated users with subscriber level access and higher can apply or remove watermarks in all versions up to 1.7.3. Impact: data modification (watermarking) of images. Aff...

CVE-2024-1994 Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification

The Image Watermark plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the watermarkactionajax function in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with subscriber-level access and above...

CVE-2024-1994 Image Watermark <= 1.7.3 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification

The Image Watermark plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the watermarkactionajax function in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with subscriber-level access and above...

WordPress Plugin Image Watermark 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

Image Watermark < 1.7.4 - Missing Authorization to Authenticated (Subscriber+) Watermark Modification

Description The Image Watermark plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the watermarkactionajax function in all versions up to, and including, 1.7.3. This makes it possible for authenticated attackers, with subscriber-level acce...

PT-2024-18482 · WordPress · Image Watermark

Name of the Vulnerable Software and Affected Versions: Image Watermark plugin for WordPress versions up to, and including, 1.7.3 Description: The issue is related to a missing capability check on the watermark action ajax function, allowing authenticated attackers with subscriber-level access and...

DX-Watermark <= 1.0.4 - Cross-Site Request Forgery

Description The DX-Watermark plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.0.4. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to upload arbitrary files and inject malicious web...

WordPress DX-Watermark plugin <= 1.0.4 - CSRF to Arbitrary File Upload and XSS vulnerability

CSRF to Arbitrary File Upload and XSS vulnerability discovered by Dimas Maulana Patchstack Alliance in WordPress Plugin DX-Watermark versions = 1.0.4...

WordPress DX-Watermark Plugin <= 1.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software DX-Watermark Type Plugin Vulnerable versions = 1.0.4 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-30560 Patch priority Low CVSS severity Low 9.6 Developer Claim ownership PSID 545443b5c1d7 Credits Dimas Maulana Required...

CVE-2024-27195

Cross-Site Request Forgery CSRF vulnerability in sverde1 Watermark RELOADED watermark-reloaded allows Cross Site Request Forgery.This issue affects Watermark RELOADED: from n/a through = 1.3.5...

CVE-2024-27195

CVE-2024-27195 is a CSRF to Stored XSS vulnerability in Watermark RELOADED for WordPress, affecting Watermark RELOADED versions up to 1.3.5. The available connected sources confirm the issue and affected version range, with a CVSS v3.1 base score of 7.1 (HIGH). There is no published patch or miti...

CVE-2024-27195 WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in sverde1 Watermark RELOADED watermark-reloaded allows Cross Site Request Forgery.This issue affects Watermark RELOADED: from n/a through = 1.3.5...

CVE-2024-27195 WordPress Watermark RELOADED plugin <= 1.3.5 - CSRF to XSS vulnerability

Cross-Site Request Forgery CSRF vulnerability in sverde1 Watermark RELOADED watermark-reloaded allows Cross Site Request Forgery.This issue affects Watermark RELOADED: from n/a through = 1.3.5...

WordPress Plugin Watermark RELOADED Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

PT-2024-21731 · Unknown · Watermark Reloaded

Name of the Vulnerable Software and Affected Versions: Watermark RELOADED versions 1.3.5 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...