King-Theme Product Designer for WooCommerce WordPress | Lumise

• CVE-2026-15323 High 7.5 Product Designer for WooCommerce WordPress | Lumise <= 2.1.2 - Unauthenticated Arbitrary File Read via 'design.stages[*].image' Parameter in Cart JSON Upload 0.9%
• CVE-2026-9713 High 7.5 Product Designer for WooCommerce WordPress | Lumise <= 2.1.1 - Unauthenticated SQL Injection via 'id' Parameter in Cart JSON Upload 0.5%