Cpe:2.3:a:woocommerce:designer_pro:*:*:*:*:*:wordpress:*:*

WooCommerce Designer Pro version 1.9.26 and earlier is vulnerable to unauthenticated arbitrary file upload due to insufficient validation in the wcdp_save_canvas_design_ajax function, facilitating remote code execution.