The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
PoC: CVE-2025-6440
WooCommerce Designer Pro - Arbitrary File Upload
[POC] CVE-2025-64403 — CVE-2025-64403-Exploit
Missing Authorization (CWE-862)
PoC: CVE-2025-6440
CVE-2025-6440
PoC: CVE-2025-6440
nuclei tamplate to CVE-2025-6440
PoC: CVE-2025-6440
WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload
PoC: CVE-2025-6440
cara penggunaan
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Get alerted for CVEs like this
Register your stack and get notified within minutes when a matching CVE drops.
Start monitoring free