Pickplugins Product Designer For Woocommerce
Monthly
Unauthenticated attackers can write design-template data into the metadata of arbitrary posts on WordPress sites running the PickPlugins Product Designer for WooCommerce plugin through 1.0.40, because the plugin performs no capability check, inverts its nonce verification, and does not validate the target post ID. Publicly available exploit code exists and remote unauthenticated exploitation works against default installations with no token harvesting or user interaction, though impact is bounded to integrity of post metadata with no confidentiality or availability effect and no direct code execution. EPSS-style risk signals were not provided, and the issue is not reported as part of CISA KEV, so the practical exposure is a moderate-priority data-integrity problem requiring the plugin to be installed and active.
Unauthenticated attackers can write design-template data into the metadata of arbitrary posts on WordPress sites running the PickPlugins Product Designer for WooCommerce plugin through 1.0.40, because the plugin performs no capability check, inverts its nonce verification, and does not validate the target post ID. Publicly available exploit code exists and remote unauthenticated exploitation works against default installations with no token harvesting or user interaction, though impact is bounded to integrity of post metadata with no confidentiality or availability effect and no direct code execution. EPSS-style risk signals were not provided, and the issue is not reported as part of CISA KEV, so the practical exposure is a moderate-priority data-integrity problem requiring the plugin to be installed and active.