来源

关联漏洞

描述

WooCommerce Designer Pro - Arbitrary File Upload

介绍

### Description

WooCommerce Designer Pro plugin for WordPress contains a critical vulnerability in versions up to and including 1.9.26. 
This vulnerability was discovered and disclosed on October 24, 2025. 
The affected component is specifically the ``wcdp_save_canvas_design_ajax`` function within the plugin, which is commonly used by the Pricom - Printing Company & Design Services WordPress them

---

## Install & Use

Installation:

```
pip install -r requirements.txt
```

Usage :

```
python3 exploit.py --url http://example.com/ --file shell.php --verbose
```

Notes:

--url : target base URL (script normalizes it).

--file : local file to upload.

--verbose : optional detailed output.

The script saves:

downloaded_<uniq>.bin

extracted_<uniq>.php (extracted PHP fragment if found)

## Mitigation

Update WooCommerce Designer Pro to the patched version when available.
Prevent PHP execution in upload directories. Example nginx:

```
location ~* /wp-content/uploads/.*\.(php|phtml|php[0-9]*)$ {
    return 403;
}
```

Validate uploaded file types and scan file contents server-side.
Restrict access to AJAX endpoints where possible and monitor upload activity.

文件快照

 [4.0K]  /data/pocs/0a0861b349c1e90998c0b3f12379c58dcdd36649
├── [7.3K]  CVE-2025-6440.py
├── [1.1K]  README.md
└── [  49]  requirements.txt

0 directories, 3 files

备注