CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - 認証なし任意ファイルアップロード 説明 WordPressテーマ「Pricom - Printing Company & Design Services」で使用されるWordPressプラグイン「WooCommerce Designer...

CVE-2025-6440-Poc-Exploit

WC Designer Pro — Carga Arbitraria de Archivos sin Autenticación Prueba de concepto de investigación de seguridad Una prueba de concepto no destructiva para una vulnerabilidad de carga arbitraria de archivos sin autenticación que afecta al plugin de WordPress WC Designer Pro. Tabla de contenidos...

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

CVE-2025-6440

🧨 CVE-2025-6440 – Carga de Archivos sin Restricciones en WooCommerce Designer Pro Carga Arbitraria de Archivos sin Autenticación a través dewcdpsavecanvasdesignajax Plugin WooCommerce Designer Pro – Ejecución Remota de Código RCE 📖 Descripción El plugin WooCommerce Designer Pro para WordPress...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8（严重） 📝 描述 适用于 WordPress 的 WooCommerce Designer Pro 插件（广泛使用，尤其是在 Pricom - Printing Company & Design Services 等主题中）由于在 wcdpsavecanvasdesignajax 函数中缺乏正确的文件类型验证，所有版本（包括 1.9.26 及更早版本）均存在 任意文件上传 漏洞。 这可能导致未经认证的攻击者将 任何文件类型...

CVE-2025-10897

CVE-2025-10897 WooCommerce 是一个面向 WordPress 的开源电子商务插件，可将网站转变为在线商店。WooCommerce Designer Pro 是由 JMA Plugins 开发的 WordPress 插件，使客户能够直接在 WooCommerce 商店中设计和定制产品。 重要提示 ：WooCommerce 与 WooCommerce Designer Pro 是完全不同的产品。 WooCommerce Designer Pro 支持创建名片、明信片、传单、海报、T恤、贴纸及其他可打印材料，具备 CMYK 色彩支持、PDF...

CVE-2026-57329

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

CVE-2026-57329 WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

CVE-2026-57329

CVE-2026-57329 describes a Subscriber Cross Site Scripting (XSS) vulnerability in the WooCommerce Designer Pro plugin up to version 1.9.34. CVSS v3.1 base score 6.5 (attackVector: NETWORK, attackComplexity: LOW, privilegesRequired: LOW, userInteraction: REQUIRED, scope: CHANGED, confidentiality/i...

EUVD-2026-40100

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

CVE-2026-57329

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin WooCommerce Designer Pro versions = 1.9.34...

PT-2026-53290

Name of the Vulnerable Software and Affected Versions WooCommerce Designer Pro versions prior to 1.9.35 Description Cross Site Scripting XSS allows an attacker with subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update WooCommerce Designer Pro to...

Exploit for CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Unrestricted File Upl...

Exploit for CVE-2025-6440

🔓 WC Designer Pro - RCE Exploit Unauthenticated Remote Co...

CVE-2025-10897

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-10897

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-10897 WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

EUVD-2025-37310

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-10897 WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...