Product Designer for WooCommerce WordPress | Lumise vulnerabilities

2 known vulnerabilities in Product Designer for WooCommerce WordPress | Lumise from King-Theme. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Product Designer for WooCommerce WordPress |…: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-15323Oct 28, 2026King-Theme

  The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.2 via the process_checkout function. This makes it possible for unauthenticated attackers to read the co

• 7.5 High severity

  Product Designer for WooCommerce WordPress |…: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-9713Jul 23, 2026King-Theme

  The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to ins