Medium · 6.5 CVE-2025-28973 EUVD-2025-206071GHSA-8rgh-xv2q-w2wc

WordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability

Published Dec 31, 2025 · Updated Apr 29, 2026 · Assigned by Patchstack

Vendor: AA-Team Product: Pro Bulk Watermark Plugin for WordPress Category: Web / CMS

Description

Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Watermark Plugin for WordPress: from n/a through <= 2.0.

Affected products

Vendor	Product	Affected	Fixed
AA-Team	Pro Bulk Watermark Plugin for WordPress	≤ 2.0	—

References

https://patchstack.com/database/Wordpress/Theme/pro-watermark/vulnerability/wordpress-pro-bulk-watermark-plugin-for-wordpress-2-0-path-traversal-vulnerability?_s_id=cve vdb-entry