King-Theme vulnerabilities
We track 3 vulnerabilities in King-Theme products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 28, 2026.
Latest King-Theme vulnerabilities
- 7.5 High severity
Product Designer for WooCommerce WordPress |…: Improper Limitation of a Pathname to a Restricted Directory
The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.2 via the process_checkout function. This makes it possible for unauthenticated attackers to read the co
- 7.5 High severity
Product Designer for WooCommerce WordPress |…: Improper Neutralization of Special Elements used in an SQL Command
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to ins
- 9.3 Critical severity
Lumise Product Designer: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in King-Theme Lumise Product Designer lumise allows Blind SQL Injection.This issue affects Lumise Product Designer: from n/a through < 2.0.9.