High · 7.5 CVE-2024-38726 EUVD-2024-37577GHSA-7rqw-6hgh-fhrg

WordPress Product Designer plugin <= 1.0.33 - Arbitrary Content Deletion vulnerability

Published Nov 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: PickPlugins Product: Product Designer

Description

Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Designer: from n/a through 1.0.33.

Affected products

Vendor	Product	Affected	Fixed
PickPlugins	Product Designer	≤ 1.0.33	—

References

https://patchstack.com/database/vulnerability/product-designer/wordpress-product-designer-plugin-1-0-33-arbitrary-content-deletion-vulnerability?_s_id=cve vdb-entry