King-Theme Lumise Product Designer SQL Injection Vulnerability
Vulnerability
A blind SQL injection vulnerability has been identified in the King-Theme Lumise Product Designer plugin for WordPress, affecting versions prior to 2.0.9. This vulnerability allows attackers to manipulate SQL queries, potentially leading to unauthorized data access or modification.
Impact
Exploitation of this vulnerability could allow attackers to interact with the database of the WordPress site, with possibilities including unauthorized data access or manipulation.
Remediation
Users of the Lumise Product Designer WordPress plugin should update to version 2.0.9 or later. Patchstack users can enable auto-updates for vulnerable plugins.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.