Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: JMA Plugins Clear all filters
TI-2025-05841 CVE-2025-6440 · GHSA-vf4q-9rpx-w639

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload

Priority HIGH 74

The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_ca…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.33345 Published 2025-10-24 No fix listed CWE-434
TI-2025-05840 CVE-2025-6439 · GHSA-q7rw-g9xx-v244

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion

Priority MEDIUM 50

The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wcdp_s…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00807 Published 2025-10-11 No fix listed CWE-22