SQL Injection in King-theme Product Designer For Woocommerce Wordpress | Lumise
CVE-2026-9713
The Lumise Product Designer for WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'id' and 'table' parameters in the uploaded cart JSON file processed by the checkout AJAX action in versions up to, and including, 2.1…
Vulnerability class: SQL Injection
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-9713?
- CVE-2026-9713 is a high-severity vulnerability in King-theme Product Designer For Woocommerce Wordpress | Lumise, classified under SQL Injection. CVSS score: 7.5/10. Published 2026-07-23.
- How severe is CVE-2026-9713?
- High severity. CVSS v3 base score is 7.5 out of 10.