Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: imprintnext Clear all filters
TI-2026-03103 CVE-2026-3599 · GHSA-8m7q-ggj7-m3wx

Riaxe Product Customizer <= 2.1.2 - Unauthenticated SQL Injection via 'options' Parameter Keys in product_data

Priority LOW 39

The Riaxe Product Customizer plugin for WordPress is vulnerable to SQL Injection via the 'options' parameter keys within 'product_data' of the /wp-json/InkXEProductDesignerLite/add-item-to-cart REST API endpoint in all v…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00489 Published 2026-04-16 No fix listed CWE-89
TI-2026-03101 CVE-2026-3596 · GHSA-6cjg-w4wg-37mh

Missing authorization in imprintnext Riaxe Product Customizer

Priority MEDIUM 44

The Riaxe Product Customizer plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 2.1.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00789 Published 2026-04-16 No fix listed CWE-862
TI-2026-03099 CVE-2026-3594 · GHSA-w5hq-hr8w-m998

Riaxe Product Customizer <= 2.4 - Unauthenticated Sensitive Information Disclosure via '/orders' REST API Endpoint

Priority LOW 31

The Riaxe Product Customizer plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.4 via the '/wp-json/InkXEProductDesignerLite/orders' REST API endpoint.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00508 Published 2026-04-08 No fix listed CWE-200