61 matches found
WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read
WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...
CVE-2025-6440
CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Description The WooCommerce Designer Pro plugin for WordPress, widely used especially in themes such as Pricom - Printing Company & Design Services, is vulnerable to arbitrary file uploads due to a lack of proper file...
VulnCheck KEV: CVE-2025-10897
The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when the wp-config.php file is read...
CVE-2025-10897
CVE-2025-10897 WooCommerce is an open-source e-commerce plugin for WordPress that turns websites into online stores. WooCommerce Designer Pro is a WordPress plugin developed by JMA Plugins that enables customers to design and customize products directly on WooCommerce stores. IMPORTANT :...
CVE-2025-6440
🧨 CVE-2025-6440 – WooCommerce Designer Pro Unrestricted File Upload Unauthenticated Arbitrary File Upload viawcdpsavecanvasdesignajax WooCommerce Designer Pro plugin – Remote Code Execution RCE 📖 Description The WooCommerce Designer Pro plugin for WordPress contains an unauthenticated arbitrary...
CVE-2025-6440
CVE-2025-6440 WooCommerce Designer Pro = 1.9.26 - Unauthenticated Arbitrary File Upload Description WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation i...
CVE-2026-32568
Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...
CVE-2026-32568 WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability
Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...
EUVD-2026-93231
Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...
CVE-2026-32568
The WooCommerce Designer Pro plugin for WordPress (versions
CVE-2026-32568 WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability
Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...
CVE-2026-32568: Improper Control of Generation of Code
Subscriber Remote Code Execution RCE in WooCommerce Designer Pro = 1.9.33 versions...
PT-2026-106396
Name of the Vulnerable Software and Affected Versions WooCommerce Designer Pro versions prior to 1.9.34 Description A code injection issue allows users with low-privileged subscriber accounts to execute arbitrary code on the server. Recommendations Update to version 1.9.34 or later...
WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability
Remote Code Execution RCE vulnerability discovered by Nguyen Ba Khanh - HPT Vietnam Corporation in WordPress Plugin WooCommerce Designer Pro versions = 1.9.33...
Exploit for CVE-2025-10897
CVE-2025-10897 !Pythonhttps://img.shields.io/badge/Python...
CVE-2026-57329
Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...
CVE-2026-57329 WordPress WooCommerce Designer Pro plugin <= 1.9.34 - Cross Site Scripting (XSS) vulnerability
Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...
CVE-2026-57329
Subscriber Cross Site Scripting XSS in WooCommerce Designer Pro = 1.9.34 versions...