Skip to content
OpenAdvisories

Archive

24 October 2025

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6440 Public exploit EPSS 35%

    WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

    The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versi…