CVE-2023-25202

CVE-2023-25202: Insecure file upload mechanism Description CVE-2023-25202 involves an insecure file upload mechanism within the Therefore application, which is overly permissive in the types of files users can upload. The application only blocks uploads of HTML, EXE, and BAK files, leaving it...

CVE-2026-82865

pdfme schemas versions prior to 5.5.10 are affected by a cross-site scripting (XSS) vulnerability in the multiVariableText property panel . The root cause is the assignment of unsanitized i18n label values to innerHTML , allowing an attacker who controls label overrides via options.labels to inje...

JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

CVE-2025-6440-Poc-Exploit

WC Designer Pro — Unauthenticated Arbitrary File Upload Security Research Proof of Concept A non-destructive proof of concept for an unauthenticated arbitrary file-upload vulnerability affecting the WC Designer Pro WordPress plugin. Table of Contents...

CVE-2025-10897

CVE-2025-10897 WooCommerce is an open-source e-commerce plugin for WordPress that turns websites into online stores. WooCommerce Designer Pro is a WordPress plugin developed by JMA Plugins that enables customers to design and customize products directly on WooCommerce stores. IMPORTANT :...

WordPress-News-and-Blog-Designer-Bundle-CVE-2025-14502

Rapporto di analisi della vulnerabilità CVE-2025-14502 Riepilogo della vulnerabilità Tipo di vulnerabilità : Inclusione locale di file Local File Inclusion, LFI Versioni interessate : News and Blog Designer Bundle 1.1 e tutte le versioni precedenti Gravità : Alta Complessità dell'attacco : Bassa...

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Uneingeschränkter Datei-Upload Nicht authentifizierter Upload beliebiger Dateien überwcdpsavecanvasdesignajax WooCommerce Designer Pro-Plugin – Remote Code Execution RCE 📖 Beschreibung Das WooCommerce Designer Pro -Plugin für WordPress enthält eine...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Iniezione SQL non autenticata Descrizione Il plugin Fancy Product Designer per WordPress è vulnerabile a SQL Injection nelle versioni fino alla 6.4.3 inclusa, a causa di un escaping insufficiente sul parametro fornito dall'utente e della mancanza di...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Descrizione Il plugin WooCommerce Designer Pro per WordPress, ampiamente utilizzato specialmente in temi come Pricom - Printing Company & Design Services, è vulnerabile al caricamento arbitrario di file a causa della...

Disclosures

Offenlegungen Dieses Repository enthält meine Schwachstellenberichte, die weder unter eine NDA fallen noch durch die VRP-Nutzungsbedingungen eingeschränkt sind. Inhalt Fancy Product Designer Microsoft Xfinity...

Adobe Substance 3D Designer < 16.0.5 Multiple Vulnerabilities (APSB26-115)

The version of Adobe Substance 3D Designer installed on the remote host is prior to 16.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-115 advisory. - Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in...

CVE-2026-71564

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48433

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48431

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48432

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48426

Substance3D - Designer is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48428

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2026-48430

Substance3D - Designer is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...