Skip to content
OpenAdvisories

Vendor

JMA Plugins

4 known vulnerabilities.

Products

WooCommerce Designer Pro 4
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-32568

    WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

    Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

    JMA Plugins WooCommerce Designer Pro Web / CMS
  • Critical 9.8
    CVE-2025-6440 Public exploit EPSS 33%

    WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

    The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versi…

    JMA Plugins WooCommerce Designer Pro Web / CMS
  • Critical 9.8
    CVE-2025-6439

    WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion

    The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wcdp_save_canvas_design_ajax' function in all…

    JMA Plugins WooCommerce Designer Pro Web / CMS