JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...

WooCommerce Designer Pro <= 1.9.28 - Arbitrary File Read

WooCommerce Designer Pro theme for WordPress = 1.9.28 contains an arbitrary file read vulnerability caused by improper input validation, letting unauthenticated attackers read arbitrary files including sensitive configuration files, exploit requires no authentication. id: CVE-2025-10897 info: nam...

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Local File Inclusion

The News & Blog Designer Pack WordPress plugin up to version 3.4.1 contains a remote code execution caused by local file inclusion in the bdpgetmorepost function, letting unauthenticated attackers include arbitrary PHP files, exploit requires AJAX request with crafted POST data. id: CVE-2023-5815...

TEN Framework - Arbitrary File Read & Write

TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vulnerabilities in the TMAN Designer file-content API endpoints, letting attackers read or write arbitrary files and execute code. The exploit requires no authentication. id: CVE-2026-85688 info: name: TEN Framework -...

CVE-2023-25202

CVE-2023-25202 : Mécanisme de téléchargement de fichier non sécurisé Description CVE-2023-25202 implique un mécanisme de téléchargement de fichier non sécurisé dans l'application Therefore, qui est trop permissive dans les types de fichiers que les utilisateurs peuvent télécharger. L'application...

Disclosures

Раскрытия Этот репозиторий содержит мои отчёты об уязвимостях, которые не подпадают под NDA и не ограничены условиями обслуживания VRP. Содержание Fancy Product Designer Microsoft Xfinity...

CVE-2025-6440

CVE-2025-6440 WooCommerce Designer Pro CVE: CVE-2025-6440 CVSS: 9.8 Critical 📝 Описание Плагин WooCommerce Designer Pro для WordPress, широко используемый особенно в таких темах, как Pricom - Printing Company & Design Services, уязвим к произвольной загрузке файлов из-за отсутствия надлежащей...

CVE-2026-94677

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

EUVD-2026-89849

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

CVE-2026-94677

The Kadence WooCommerce Email Designer plugin for WordPress, versions

CVE-2026-94677 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

CVE-2026-94677 WordPress Kadence WooCommerce Email Designer plugin <= 1.5.19.1 - PHP Object Injection vulnerability

Shop manager PHP Object Injection in Kadence WooCommerce Email Designer = 1.5.19.1 versions...

CVE-2026-75098

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

EUVD-2026-89684

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098 Product Designer App <= 1.1.3 - Unauthenticated Arbitrary File Read via 'svg' Parameter in pdapp-render-design

The Product Designer App plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.3 via the 'svg' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive...

CVE-2026-75098

The Product Designer App plugin for WordPress (versions up to and including 1.1.3 ) is vulnerable to an unauthenticated arbitrary file read via a Directory Traversal flaw in the svg parameter. An attacker can exploit this by obtaining a nonce and token, which are publicly emitted as JavaScript gl...

WordPress Product Designer App plugin <= 1.1.3 - Unauthenticated Arbitrary File Read vulnerability

Unauthenticated Arbitrary File Read vulnerability discovered by Sebastian Albrecht mySebbe in WordPress Plugin Product Designer App versions = 1.1.3...

CVE-2025-10897

CVE-2025-10897 WooCommerce — это плагин электронной коммерции с открытым исходным кодом для WordPress, который превращает веб-сайты в интернет-магазины. WooCommerce Designer Pro — это плагин WordPress, разработанный JMA Plugins, который позволяет покупателям проектировать и настраивать товары...

CVE-2024-51818

CVE-2024-51818 Fancy Product Designer = 6.4.3 - Неаутентифицированная SQL-инъекция Описание Плагин Fancy Product Designer для WordPress уязвим к SQL-инъекции в версиях до 6.4.3 включительно из-за недостаточного экранирования пользовательского параметра и отсутствия должной подготовки существующег...