Security
فارسی
All products

fancy-product-designer

WordPress · Plugin
19 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' ParameterCVE-2026-84280 fancy-product-designer WordPress High Fix reported
Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print JobCVE-2026-84279 fancy-product-designer WordPress High Fix reported
Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item MetaCVE-2026-84281 fancy-product-designer WordPress High Fix reported
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' ParameterCVE-2025-13439 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' ParameterCVE-2025-15526 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race ConditionCVE-2025-13231 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2025-12570 fancy-product-designer WordPress High Fix reported
Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File UploadCVE-2024-51919 fancy-product-designer WordPress Critical Fix reported
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL InjectionCVE-2024-51818 fancy-product-designer WordPress High Fix reported
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via License FieldCVE-2024-0904 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via Product TitleCVE-2024-0902 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer <= 6.1.7 - Reflected Cross-Site ScriptingCVE-2024-0905 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer <= 6.1.4 - Authenticated (Admin+) SQL InjectionCVE-2024-0365 fancy-product-designer WordPress Critical Fix reported
Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_optionsCVE-2021-4334 fancy-product-designer WordPress High Fix reported
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX ActionsCVE-2021-4335 fancy-product-designer WordPress Medium Fix reported
Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File UploadCVE-2021-4096 fancy-product-designer WordPress High Fix reported
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File UploadCVE-2021-24370 fancy-product-designer WordPress Critical Fix reported
Fancy Product Designer <= 4.7.4 - Admin+ SQL InjectionCVE-2021-4134 fancy-product-designer WordPress High Fix reported