Threats tagged 'ghsa-23m5-26m5-cmpf'

The Product Designer for WooCommerce WordPress | Lumise plugin is affected by a directory traversal vulnerability in all versions up to and including 2.1.2. This flaw allows unauthenticated attackers to read arbitrary files on the server via the process_checkout function. The vulnerability is exploitable without credentials because the required security nonce can be obtained by any visitor through an accessible AJAX handler.