Disclosures

Disclosures This repository contains my vulnerability reports which aren't under an NDA or restricted by VRP terms of service. Contents Fancy Product Designer Microsoft Xfinity...

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

EUVD-2026-103389

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2026-87844

The PickPlugins Product Designer for WooCommerce WordPress plugin (version 1.0.40 and below ) is vulnerable to unauthenticated data injection. The flaw stems from a lack of capability checks , an inverted nonce verification mechanism that accepts invalid or absent nonces, and a failure to validat...

CVE-2026-87844 Product Designer <= 1.0.40 - Unauthenticated Design Template Data Injection

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to,...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Unauthenticated SQL Injection Description The Fancy Product Designer plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 6.4.3 due to insufficient escaping on the user supplied parameter and lack of sufficient...

CVE-2026-39726

Unauthenticated Cross Site Scripting XSS in Lumise Product Designer = 2.1.1 versions...

EUVD-2026-93248

Unauthenticated Cross Site Scripting XSS in Lumise Product Designer = 2.1.1 versions...

CVE-2026-39726 WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Lumise Product Designer = 2.1.1 versions...

CVE-2026-39726 WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting XSS in Lumise Product Designer = 2.1.1 versions...

CVE-2026-39726

The Lumise Product Designer WordPress plugin, versions

CVE-2026-39726: Improper Neutralization of Input During Web Page Generation

Unauthenticated Cross Site Scripting XSS in Lumise Product Designer = 2.1.1 versions...

PT-2026-106413

Name of the Vulnerable Software and Affected Versions Lumise Product Designer versions prior to 2.1.2 Description An unauthenticated Cross Site Scripting XSS issue exists, which allows an attacker to execute malicious scripts in the browser of a user without requiring prior authentication...

WordPress Lumise Product Designer plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by dutafi in WordPress Plugin Lumise Product Designer versions = 2.1.1...

CVE-2026-75098

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098

The Product Designer App plugin for WordPress (versions up to and including 1.1.3 ) is vulnerable to an unauthenticated arbitrary file read via a Directory Traversal flaw in the svg parameter. An attacker can exploit this by obtaining a nonce and token, which are publicly emitted as JavaScript gl...

EUVD-2026-89684

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...