CVE-2022-0989 NS WooCommerce Watermark <= 2.11.3 - Abuse of Functionality
Unprivileged users can abuse image watermarking functionality to proxy malicious domains, aiding in hiding malware traces.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-0989?
CVE-2022-0989 is a high-severity vulnerability in Unknown NS WooCommerce Watermark, published on 11 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing malicious domains to hide their trace, by making them pass through the vulnerable domain.
Weakness: CWE-80
Which versions are affected by CVE-2022-0989?
It affects 1 product.
Products include Nsthemes Ns Watermark for Woocommerce.
How do I fix CVE-2022-0989?
No fix has been published for CVE-2022-0989 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-0989 being exploited?
There is no known exploitation of CVE-2022-0989 in the wild and no public exploit code.
Sources
Also known as GHSA-x7rm-w2h5-52qj.