CVE-2025-10897 | WooCommerce Designer Pro Theme Plugin up to 1.9.28 on WordPress wp-config.php path traversal

October 31, 2025 Yanac

A vulnerability labeled as critical has been found in WooCommerce Designer Pro Theme Plugin up to 1.9.28 on WordPress. This impacts an unknown function of the file wp-config.php. Such manipulation leads to path traversal.

This vulnerability is documented as CVE-2025-10897. The attack can be executed remotely. There is not any exploit available.VulDB Recent EntriesRead More