Pickplugins Product Designer For Woocommerce vulnerabilities

2 CVEs affecting Pickplugins Product Designer For Woocommerce, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-9111, published 2024-11-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-3608, published 2024-07-09. Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days. The Product Designer plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the product_designer_ajax_delete_attach_id() function in all versions up to,…
CVE-2024-9111, published 2024-11-21. Medium severity, CVSS 6.4. EPSS: 0.5% chance of exploitation in the next 30 days. The Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.36 due to insufficient input sanitization and…