Read the docs

JMA Plugins

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

JMA Plugins records in CISA KEV

No JMA Plugins vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-05841 CVE-2025-6440 · GHSA-vf4q-9rpx-w639

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

Priority HIGH 74

The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_ca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33345 Published 2025-10-24 No fix listed CWE-434
TI-2025-05840 CVE-2025-6439 · GHSA-q7rw-g9xx-v244

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion

Priority MEDIUM 50

The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wcdp_s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2025-10-11 No fix listed CWE-22
Open these records in search →