Riaxe Product Customizer vulnerabilities

2 known vulnerabilities in Riaxe Product Customizer from Imprintnext. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Riaxe Product Customizer: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-3599Apr 16, 2026Imprintnext

  The Riaxe Product Customizer plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter keys within 'product_data' of the /wp-json/InkXEProductDesignerLite/add-item-to-cart REST API endpoint in all versions up to, and including, 2.1.2. Thi

• 9.8 Critical severity

  Riaxe Product Customizer: Missing Authorization

  CVE-2026-3596Apr 16, 2026Imprintnext

  The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.2. The plugin registers an unauthenticated AJAX action ('wp_ajax_nopriv_install-imprint') that maps to the ink_pd_add_option() fun