The vulnerability identified as CVE-2024-50509 affects the Woocommerce Product Design plugin by Chetan Khandla, allowing improper limitation of a pathname to a restricted directory, commonly known as a path traversal issue. This enables an attacker to access files or directories outside the intended scope. The affected versions include all releases up to and including 1.0.0. The CVSS v3.1 base score is 8.6, indicating high severity with network attack vector, low attack complexity, no privileges or user interaction required, and a scope change. The impact is limited to availability (denial of service) without affecting confidentiality or integrity. No patch or remediation information is currently provided.

The vulnerability can be exploited remotely without authentication or user interaction to cause denial of service by accessing unintended directories. It does not compromise data confidentiality or integrity. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should monitor official sources for updates and consider restricting access to the plugin or disabling it if feasible to reduce exposure.