Advisories · Technology

PickPlugins Product Designer for WooCommerce.

Every CVE that names PickPlugins Product Designer for WooCommerce among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87844 CVE record

CVSS 5.3 Medium

Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection
- PickPlugins Product Designer for WooCommerce
- Broken access control
Not analysed yet 18 Oct 2026
CVE-2024-9111 CVE record

CVSS 6.4 Medium

Product Designer <= 1.0.36 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- PickPlugins Product Designer for WooCommerce
- Cross-site scripting (XSS)
Not analysed yet 21 Nov 2024
CVE-2024-3608 CVE record

CVSS 5.3 Medium

Product Designer <= 1.0.33 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion
- PickPlugins Product Designer for WooCommerce
- Broken access control
Not analysed yet 9 Jul 2024