CVE-2026-87844: PickPlugins Product Designer for WooCommerce 0 through 1.0.40

Affected technology

PickPlugins Product Designer for WooCommerce · 0 through 1.0.40
Vendor not specified by the source

Description’s affected range: through 1.0.40 does not perform any capability check and its nonce verification is inverted

Component: Not specified by the source

What an attacker can do

Unauthenticated users can insert design template data into the metadata of any post on the site.