Advisories · Technology
King-Theme Product Designer for WooCommerce WordPress | Lumise.
Every CVE that names King-Theme Product Designer for WooCommerce WordPress | Lumise among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.5 High
Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload
- King-Theme Product Designer for WooCommerce WordPress | Lumise
- Path traversal
- CVSS 7.5 High
Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload
- King-Theme Product Designer for WooCommerce WordPress | Lumise
- SQL injection