Advisories · Technology
imprintnext Riaxe Product Customizer.
Every CVE that names imprintnext Riaxe Product Customizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data
- imprintnext Riaxe Product Customizer
- SQL injection
- CVSS 5.3 Medium
Riaxe Product Customizer <= 2.1.2 - Unauthenticated Arbitrary User Deletion via 'user_id' Parameter
- imprintnext Riaxe Product Customizer
- Broken access control
- CVSS 9.8 CriticalCritical · CVSS 9+
Riaxe Product Customizer <= 2.1.2 - Missing Authorization to Unauthenticated Arbitrary Options Update to Privilege Escalation via 'install-imprint' AJAX Action
- imprintnext Riaxe Product Customizer
- Broken access control
- CVSS 5.3 Medium
Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint
- imprintnext Riaxe Product Customizer
- Information disclosure