CVE WATCH / VULNERABILITY DETAIL
CVE-2026-15323
HIGHCVSS 7.5NVD feed
Published 28 October 2026 · tracked since 29 October 2026
Description
The Product Designer for WooCommerce WordPress | Lumise plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.2 via the process_checkout function. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server,
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2025-30414 HIGH 7.1
- CVE-2026-92797 HIGH 8.8
- CVE-2026-101935 MEDIUM 6.1
- CVE-2026-76780 MEDIUM 6.3
- CVE-2026-77188 MEDIUM 6.4
- CVE-2026-77871 MEDIUM 6.4
- CVE-2026-92098 MEDIUM 6.1
- CVE-2026-76005 MEDIUM 6.5
- CVE-2026-118164 MEDIUM 6.4
- CVE-2026-116609 MEDIUM 6.5