product_designer_for_woocommerce_wordpress_lumise vulnerabilities

CVEs whose affected-version data names the product_designer_for_woocommerce_wordpress_lumise package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-15323High· 7.5

1w ago

Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload

The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.2 via the process_checkout function. This makes it possible for unauthenticated a…

▾ TwilightKing-Theme · Product Designer for WooCommerce WordPress | LumiseEPSS 0.86%via CVEORG