CVE-2022-0989

The CVE-2022-0989 entry concerns the WordPress NS WooCommerce Watermark plugin (≤ 2.11.3). The issue is abuse of functionality allowing an unprivileged user to load images that can hide malware by routing through the vulnerable domain via the plugin’s image handling (ns_image.php). This is docume...