WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8（クリティカル） 📝 説明 WordPress用プラグイン WooCommerce Designer Pro （ Pricom - Printing Company & Design Services などのテーマで広く使用されています）は、バージョン 1.9.26 以前のすべてのバージョンにおいて、wcdpsavecanvasdesignajax 関数に適切なファイルタイプ検証がないため、任意のファイルアップロード の脆弱性があります。...

CVE-2025-10897

CVE-2025-10897 WooCommerce は、WordPress サイトをオンラインストアに変えるオープンソースの eコマースプラグインです。WooCommerce Designer Pro は、JMA Plugins が開発した WordPress プラグインで、顧客が WooCommerce ストア上で直接製品をデザイン・カスタマイズできるようにします。 重要 : WooCommerce と WooCommerce Designer Pro はまったく異なります。 WooCommerce Designer Pro...

CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro 無制限ファイルアップロード wcdpsavecanvasdesignajax を介した認証なしの任意ファイルアップロード WooCommerce Designer Pro プラグイン – リモートコード実行（RCE） 📖 説明 WordPress 用 WooCommerce Designer Pro プラグインには、AJAX アクション wcdpsavecanvasdesignajax にの脆弱性が存在します。攻撃者は認証なしで任意のファイル（悪意のある PHP...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - 인증되지 않은 임의 파일 업로드 설명 WordPress용 WooCommerce Designer Pro 플러그인Pricom - Printing Company & Design Services WordPress 테마에서 사용은 1.9.26을 포함한 모든 버전에서 'wcdpsavecanvasdesignajax' 함수의 파일 유형 검증 누락으로 인해 임의 파일 업로드에 취약합니다. 이로 인해 인증되지 않은 공격자가 영향을 받는 사이트 서버에 임의...

Exploit for CVE-2025-10897

CVE-2025-10897 !Pythonhttps://img.shields.io/badge/Python...

CVE-2026-57329

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

CVE-2026-57329 WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

CVE-2026-57329 WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

CVE-2026-57329

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

EUVD-2026-40100

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Nguyen Ba Khanh in WordPress Plugin WooCommerce Designer Pro versions = 1.9.34...

PT-2026-53290

Name of the Vulnerable Software and Affected Versions WooCommerce Designer Pro versions prior to 1.9.35 Description Cross Site Scripting XSS allows an attacker with subscriber privileges to execute malicious scripts in the browser of other users. Recommendations Update WooCommerce Designer Pro to...

CVE-2026-57329: Improper Neutralization of Input During Web Page Generation

Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...

Exploit for CVE-2025-6440

🧨 CVE-2025-6440 – WooCommerce Designer Pro Unrestricted File Upl...

CVE-2025-10897

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-10897

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-10897 WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

EUVD-2025-37310

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...

CVE-2025-10897 WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...