Marekkis Watermark Vulnerabilities

The Marekkis Watermark-Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they ca...

CVSS:

6.1

Affected:

up to 0.9.4

Fix:

No patched version reported

Disclosed:

Feb 16, 2025

CVE-2025-23425 on NVD →

Cross-site scripting (XSS) vulnerability in the Marekkis Watermark plugin 0.9.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pfad parameter to wp-admin/options-general.php. NOTE: some of these details are obtained from third party information.

CVSS:

6.1

Affected:

up to 0.9.4

Fix:

No patched version reported

Disclosed:

Feb 18, 2013

CVE-2013-1758 on NVD →