The Image Watermark tool on WordPress has a security issue that allows people to change data without permission. This happens because the watermark_action_ajax() function doesn’t check for the right permissions. This means that someone who is logged in and has at least subscriber access can add or remove watermarks from images.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
