King-Theme
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Product Designer for WooCommerce WordPress | Lumise | 2 | – | Oct 28, 2026 |
| Lumise Product Designer | 1 | – | Mar 25, 2026 |
Exploited and recent CVEs
- CVE-2026-15323 Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload 0.9%
- CVE-2026-9713 Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload 0.5%
- CVE-2026-25371 WordPress Lumise Product Designer plugin < 2.0.9 - SQL Injection vulnerability 0.3%