Lucene search
+L

7 matches found

NVD
NVD
•added 2026/10/18 7:16 a.m.•7 views

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

5.3CVSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/18 6:00 a.m.•12 views

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

SaveExploits0References1
EUVD
EUVD
•added 2026/10/18 6:00 a.m.•2 views

EUVD-2026-103389

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

5.3CVSS5.9AI score
SaveExploits0References1
CVE
CVE
•added 2026/10/18 6:00 a.m.•9 views

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

5.3CVSS5.9AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/01 12:00 a.m.•5 views

CVE-2024-38726: Missing Authorization

Missing Authorization vulnerability in PickPlugins Product Designer allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Product Designer: from n/a through 1.0.33...

7.5CVSS5.8AI score0.00476EPSS
SaveExploits0References1
CVE
CVE
•added 2024/04/07 5:24 p.m.•73 views

CVE-2024-31277

CVE-2024-31277 affects PickPlugins Product Designer (WordPress plugin) up to version 1.0.32. Root cause: Deserialization of untrusted data leading to unauthenticated PHP Object Injection. Impact: potential compromise of data integrity and confidentiality as indicated by CVSS, with unauthenticated...

8.7CVSS8.5AI score0.00466EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/07 12:00 a.m.•5 views

CVE-2024-31277: Deserialization of Untrusted Data

Deserialization of Untrusted Data vulnerability in PickPlugins Product Designer.This issue affects Product Designer: from n/a through 1.0.32...

8.7CVSS5.8AI score0.00466EPSS
SaveExploits0References2
Rows per page
Query Builder