blogsafe.org My Downloads

BlogSafe.org

WordPress CVEs

Search and review WordPress-related vulnerability records.

← Back to CVE list

CVE-2022-0989

HIGH 7.5 CVSS 3.1
Published
April 11, 2022
Last modified
June 17, 2026
NVD status
Modified
Reported by
contact@wpscan.com
Weakness
CWE-80
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Description

An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing malicious domains to hide their trace, by making them pass through the vulnerable domain.

Affected products and versions

  • Unknown NS WooCommerce Watermark — From 2.11.3 (including) to 2.11.3 (including)
  • nsthemes ns_watermark_for_woocommerce — Up to and including 2.11.3

References

  • wpscan.com https://wpscan.com/vulnerability/a6bfc150-8e3f-4b2d-a6e1-09406af41dd4 Exploit, Third Party Advisory
  • nvd.nist.gov Official NVD record