What happened
Unauthenticated file upload in WooCommerce Designer Pro allows RCE via wcdp_save_canvas_design_ajax.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
SploitusUnauthenticated file upload in WooCommerce Designer Pro allows RCE via wcdp_save_canvas_design_ajax.KitPloit2026-09-21T04:57:58Verifiedkitploit.comUnauthenticated file upload in WooCommerce Designer Pro allows RCE via wcdp_save_canvas_design_ajax.zh2026-09-21T04:57:58CandidatePoC-in-GitHub · AnotherSec/CVE-2025-6440WooCommerce Designer Pro 1.9.26 - Arbitrary File Upload★ 1AnotherSec2025-10-30CandidatePoC-in-GitHub · Nxploited/CVE-2025-6440WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload★ 1Nxploited2025-11-10CandidatePoC-in-GitHub · m2hcz/CVE-2025-6440-Poc-Exploit★ 1m2hcz2025-11-29CandidatePoC-in-GitHub · rimbadirgantara/CVE-2025-6440nuclei tamplate to CVE-2025-6440★ 0rimbadirgantara2026-01-03CandidatePoC-in-GitHub · 0axz-tools/CVE-2025-6440★ 00axz-tools2026-03-08CandidatePoC-in-GitHub · sahmsec/CVE-2025-6440CVE-2025-6440★ 1sahmsec2026-05-07CandidatePoC-in-GitHub · SangSenimanWartefak/CVE-2025-6440★ 0SangSenimanWartefak2026-06-11CandidatePoC-in-GitHub · katranSefa/CVE-2025-6440★ 0katranSefa2026-08-30Candidate0xCyp1337/CVE-2025-6440-BypassExtUnauthenticated arbitrary file upload in WC Designer Pro for WordPress leads to RCE.0xCyp13372026-10-18T07:22:55VerifiedSploitusUnauthenticated arbitrary file upload in WC Designer Pro for WordPress leads to RCE.0xCyp13372026-10-18T07:22:55VerifiedSource timeline
Discovered through SploitusView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.