EUVD-2026-40100
GHSA-q34r-767v-46h6
Severity by source
AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
PR:L confirmed by subscriber-level requirement; UI:R and S:C reflect stored XSS cross-context execution; A:N as no availability impact is demonstrated by available description.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Lifecycle Timeline
2DescriptionCVE.org
Subscriber Cross Site Scripting (XSS) in WooCommerce Designer Pro <= 1.9.34 versions.
AnalysisAI
Stored Cross-Site Scripting in WooCommerce Designer Pro (WordPress plugin) versions 1.9.34 and earlier allows authenticated subscribers to inject malicious scripts that execute in the browsers of other users, including administrators. The scope change (S:C in CVSS) indicates injected payloads can cross privilege boundaries, enabling session hijacking, credential theft, or unauthorized administrative actions. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid subscriber-level (or higher) account on the target WordPress site - sites with open customer registration are directly exposed. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 6.5 with vector AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L reflects a network-reachable, low-complexity flaw requiring low privileges (subscriber) and victim interaction, with a scope change indicating impact beyond the originating security context. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker registers a free subscriber account on a WooCommerce storefront running the vulnerable plugin, then injects a malicious JavaScript payload into a product design or customization field. When a store administrator reviews or processes the submitted design - for example, through the WooCommerce order management panel - the script executes in the admin's browser, exfiltrating the admin session cookie or silently creating a new administrative account. … |
| Remediation | Upgrade WooCommerce Designer Pro to a version beyond 1.9.34; per Patchstack convention the advisory URL (https://patchstack.com/database/wordpress/plugin/wc-designer-pro/vulnerability/wordpress-woocommerce-designer-pro-plugin-1-9-34-cross-site-scripting-xss-vulnerability) should confirm the exact fixed release - check the Patchstack entry and the WordPress plugin repository for the patched version before upgrading. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-79 – Cross-site Scripting (XSS)
View allShare
External POC / Exploit Code
Leaving vuln.today