CVE-2026-32568criticalCWE-94

CVE-2026-32568: critical vulnerability in JMAPlugins WooCommerce Designer Pro

WordPress WooCommerce Designer Pro plugin <= 1.9.33 - Remote Code Execution (RCE) vulnerability

Published 06 Oct 2026

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.9epss 0.7%

exploitation probability

0.7%top 47% of all CVEs

observed exploitation

nono source reports it

Subscriber Remote Code Execution (RCE) in WooCommerce Designer Pro <= 1.9.33 versions.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected products

References