WordPress security by component

Neon Product Designer

Plugin description

Neon Product Designer is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Apr 11, 2025; the highest CVE/CNA score is 9.3.

Plugin slug: neon-product-designer-for-woocommerce

Latest vulnerability

CVE-2025-32565: Neon Product Designer: SQL injection

Neon Product Designer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedApr 11, 2025

Safe version guidanceSee mitigation notes

		Safe version
Apr 11, 2025	CVE-2025-32565 Neon Product Designer: SQL injection Neon Product Designer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE9.3 NVDPending
Jan 15, 2025	CVE-2025-22799 Neon Product Designer: SQL injection Neon Product Designer is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.	See mitigation notes	CVE8.5 NVDPending