Skip to content
OpenAdvisories

Vendor

King-Theme

3 known vulnerabilities.

Products

Product Designer for WooCommerce WordPress | Lumise 2 Lumise Product Designer 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-15323

    Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload

    The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.2 via the process_checkout function. This makes it possible for unauthenticated attackers to read the c…

    King-Theme Product Designer for WooCommerce WordPress | Lumise Web / CMS
  • High 7.5
    CVE-2026-9713

    Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload

    The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1.1. This is due to in…

    King-Theme Product Designer for WooCommerce WordPress | Lumise Web / CMS