Skip to content
OpenAdvisories

Vendor

JMA Plugins

3 known vulnerabilities.

Products

WooCommerce Designer Pro 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6440 Public exploit EPSS 33%

    WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

    The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versi…

    JMA Plugins WooCommerce Designer Pro Web / CMS