Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2022-0989

Description

An unprivileged user could use the functionality of the NS WooCommerce Watermark WordPress plugin through 2.11.3 to load images that hide malware for example from passing malicious domains to hide their trace, by making them pass through the vulnerable domain.

POC

Reference

- https://wpscan.com/vulnerability/a6bfc150-8e3f-4b2d-a6e1-09406af41dd4

Github

- https://github.com/20142995/nuclei-templates

- https://github.com/ARPSyndicate/cvemon