Critical · 9.9 CVE-2026-32568 EUVD-2026-93231GHSA-37jp-c43x-pc4v

WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

Published Oct 6, 2026 · Updated Oct 6, 2026 · Assigned by Patchstack

Vendor: JMA Plugins Product: WooCommerce Designer Pro Category: Web / CMS

Description

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

Affected products

Vendor	Product	Affected	Fixed
JMAPlugins	WooCommerce Designer Pro	≤ 1.9.33	—

References

https://patchstack.com/database/wordpress/plugin/wc-designer-pro/vulnerability/wordpress-woocommerce-designer-pro-plugin-1-9-33-remote-code-execution-rce-vulnerability?_s_id=cve vdb-entry