Skip to content
OpenAdvisories

Vendor

JMA Plugins

3 known vulnerabilities.

Products

WooCommerce Designer Pro 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.6
    CVE-2025-10897 Public exploit

    WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

    The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials whe…

    JMA Plugins WooCommerce Designer Pro Web / CMS
  • Critical 9.8
    CVE-2025-6440 Public exploit EPSS 33%

    WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

    The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versi…

    JMA Plugins WooCommerce Designer Pro Web / CMS