CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through <= 2.0.
Explanation of Vulnerability in Simple Terms
The Pro Bulk Watermark Plugin for WordPress versions 2.0 and earlier contains a flaw that allows authenticated users with low privileges to read sensitive data from the site. An attacker with a standard user account can access information they should not be able to view. The vulnerability does not allow data modification or site unavailability. Update to a version newer than 2.0.
What an attacker can do
Read sensitive data accessible through the plugin that should be restricted from their user role.
Potential impact on your site
User account data or plugin configuration details may be exposed to low-privilege site members.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
