← WordPress Vulnerabilities
WordPress security by component

Lumise Product Designer

Lumise Product Designer is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Mar 25, 2026; the highest CVE/CNA score is 9.3.

Plugin slug: lumise

CVE-2026-25371: Lumise Product Designer: SQL injection

Lumise Product Designer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.0.9.

PublishedMar 25, 2026
Known safe version2.0.9
Safe version
Mar 25, 2026 CVE-2026-25371
Lumise Product Designer: SQL injection
Lumise Product Designer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 2.0.9.
2.0.9
CVE9.3
NVDPending