CVE-2026-87844

5.3 Moyenne

Publiée le 18/10/2026 à 09:16 · Modifiée le 19/10/2026 à 23:04 · Analyse NVD reportée · Source : contact@wpscan.com

Description

The PickPlugins Product Designer for WooCommerce WordPress plugin through 1.0.40 does not perform any capability check and its nonce verification is inverted, accepting requests with an invalid or absent nonce while rejecting valid ones, and it does not validate the post the data is written to, allowing unauthenticated users to insert design template data into the metadata of any post on the site.

Traduire en français

Produits concernés

Unknown PickPlugins Product Designer for WooCommerce

Scores CVSS

Version	Score	Source	Vecteur
3.1	5.3 Moyenne	134c704f-9b21-4f2e-91b3-4a467353bcc0	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N`

Faiblesses (CWE)

CWE-862

Références

https://wpscan.com/vulnerability/648c7a32-1fc8-44a9-8f52-3aab81a2de55/

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories