Description
WordPress WooCommerce Designer Pro存在任意文件读取，文件内容以base64格式返回，攻击者可以获取服务器敏感信息
WordPress WooCommerce Designer Pro存在任意文件读取(CVE-2025-10897)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-10897
https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wc-designer-pro/woocommerce-designer-pro-1928-unauthenticated-arbitrary-file-read
https://www.cvedetails.com/cve/CVE-2025-10897/
https://github.com/advisories/GHSA-mw5m-g282-gj23
https://www.sentinelone.com/vulnerability-database/cve-2025-10897/
https://pentest-tools.com/vulnerabilities-exploits/woocommerce-designer-pro-1928-arbitrary-file-read_29246
https://vulners.com/nuclei/NUCLEI:CVE-2025-10897
https://hackhalt.com/threat/cve-2025-10897/
https://s4e.io/tools/woocommerce-designer-pro-arbitrary-file-read-cve-2025-10897
https://cve.imfht.com/poc_detail/47da2ad166d17b9ed1886cd407d587a87ffc0d09?lang=en