plugin

Woo Product Design Vulnerabilities

3 known security issues reported for the Woo Product Design WordPress plugin. Most recent disclosed Oct 29, 2024.

2 critical 1 high

Running Woo Product Design on your site? Check whether your installed version is affected.

Scan your site free

Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Download

high

The Woocommerce Product Design plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.

CVSS:
7.5
Affected:
up to 1.0.0
Fix:
No patched version reported
Disclosed:
Oct 29, 2024

CVE-2024-50508 on NVD →

Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Deletion

critical

The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution...

CVSS:
9.8
Affected:
up to 1.0.0
Fix:
No patched version reported
Disclosed:
Oct 28, 2024

CVE-2024-50509 on NVD →

Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload

critical

The Woocommerce Product Design plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.0.0. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution p...

CVSS:
9.8
Affected:
up to 1.0.0
Fix:
No patched version reported
Disclosed:
Oct 25, 2024

CVE-2024-50482 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database