Arbitrary File Read Vulnerability in WooCommerce Designer Pro Theme by WordPress

CVE-2025-10897

What is CVE-2025-10897?

The WooCommerce Designer Pro theme for WordPress is vulnerable to an arbitrary file read, impacting all versions up to and including 1.9.28. This vulnerability allows unauthenticated attackers to read sensitive files from the server, potentially exposing critical information such as database credentials found in the wp-config.php file. Websites utilizing this theme are at risk of unauthorized access to sensitive data, highlighting the necessity for prompt updates and security measures to safeguard against these types of threats.

References