Privilege Escalation in Riaxe Product Customizer Plugin for WordPress
CVE-2026-3596

9.8CRITICAL

Key Information:

Vendor

WordPress
Status
Riaxe Product Customizer
Vendor
CVE Published:
16 April 2026

What is CVE-2026-3596?

The Riaxe Product Customizer plugin for WordPress has a significant flaw due to improper handling of AJAX requests. It allows unauthenticated users to exploit the 'wp_ajax_nopriv_install-imprint' action, which invokes the ink_pd_add_option() function. This function fails to implement nonce verification and proper capability checks when modifying WordPress options, allowing attackers to manipulate arbitrary option values. Consequently, malicious actors could gain elevated privileges by registering users with administrative roles.

Affected Version(s)

Riaxe Product Customizer 0 <= 2.1.2

References

https://www.wordfence.com/threat-intel/vulnerabilities/id...
https://plugins.trac.wordpress.org/browser/riaxe-product-...
https://plugins.trac.wordpress.org/browser/riaxe-product-...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Kai Aizen
.