Skip to content
OpenAdvisories

Product · PickPlugins

PickPlugins Product Designer for WooCommerce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-9111

    Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

    The Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.36 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attac…

    PickPlugins PickPlugins Product Designer for WooCommerce Web / CMS
  • Medium 5.3
    CVE-2024-3608

    Product Designer <= 1.0.33 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion

    The Product Designer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the product_designer_ajax_delete_attach_id() function in all versions up to, and including, 1.0.33. This makes it possible for unauthenti…

    PickPlugins PickPlugins Product Designer for WooCommerce Web / CMS