JMA Plugins vulnerabilities
We track 3 vulnerabilities in JMA Plugins products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 31, 2025.
Latest JMA Plugins vulnerabilities
- 8.6 High severity
WooCommerce Designer Pro: Improper Limitation of a Pathname to a Restricted Directory
The WooCommerce Designer Pro theme for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 1.9.28. This makes it possible for unauthenticated attackers to read arbitrary files on the server, which can expose DB credentials when
- 9.8 Critical severity
WooCommerce Designer Pro: Unrestricted Upload of File with Dangerous Type
The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versio
- 9.8 Critical severity
WooCommerce Designer Pro: Improper Limitation of a Pathname to a Restricted Directory
The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'wcdp_save_canvas_design_ajax' function in all