Skip to content
OpenAdvisories

Vendor

JMA Plugins

3 known vulnerabilities.

Products

WooCommerce Designer Pro 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2025-10897 Public exploit

    WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read

    The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials whe…

    JMA Plugins WooCommerce Designer Pro Web / CMS