SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2026-32568

CriticalCVSS 9.9
Published: Updated: Translated: NVD NIST

Summary

The vulnerability allows a subscriber to perform remote code execution (RCE) in WooCommerce Designer Pro up to version 1.9.33.

Risk Assessment

A subscriber can execute arbitrary code on the server, potentially leading to full site and server takeover.

Recommendation

Update the WooCommerce Designer Pro plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in WooCommerce Designer Pro

Original NVD description (English source)

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS