Remote Code Execution Vulnerability in WooCommerce Designer Pro by WordPress
CVE-2026-32568

9.9CRITICAL

Key Information:

Vendor

WordPress
Status
WooCommerce Designer Pro
Vendor
CVE Published:
6 October 2026

What is CVE-2026-32568?

A security vulnerability in WooCommerce Designer Pro versions 1.9.33 and earlier allows remote attackers to execute arbitrary code on affected installations. This flaw can lead to unauthorized access and potential control over the server, making it critical for users to apply updates and patches as soon as they are available.

Affected Version(s)

WooCommerce Designer Pro <= 1.9.33

References

https://patchstack.com/database/wordpress/plugin/wc-desig...
vdb-entry

CVSS V3.1

Score:
9.9
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Ba Khanh - HPT Vietnam Corporation | Patchstack Bug Bounty Program
.