WordPress security by component
WooCommerce Designer Pro
Plugin description
WooCommerce Designer Pro is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Oct 31, 2025; the highest CVE/CNA score is 9.8.
Plugin slug:
woocommerce-designer-proLatest vulnerability
CVE-2025-10897: WooCommerce Designer Pro: Filesystem traversal
WooCommerce Designer Pro is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
| Safe version |
|
||
|---|---|---|---|
| Oct 31, 2025 |
CVE-2025-10897
WooCommerce Designer Pro: Filesystem traversal
WooCommerce Designer Pro is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.6
NVDPending
|
| Oct 24, 2025 |
CVE-2025-6440
WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services: Dangerous file upload
WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services is affected by dangerous file upload. The vulnerable path is reachable without authentication. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Oct 11, 2025 |
CVE-2025-6439
WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services: Code execution
WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services is affected by code execution. The vulnerable path is reachable without authentication. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE9.8
NVDPending
|