Fancy-Product-Designer Fancy Product Designer vulnerabilities

1 known vulnerability affecting fancy-product-designer/fancy_product_designer.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2021-4096HIGHCVSS 8.8≥ 4.7.5, ≤ 4.7.52022-04-19

CVE-2021-4096 [HIGH] CWE-352 CVE-2021-4096: The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the FPD_Admin_Import class that makes it possible for attackers to upload malicious files that could be used to gain webshell access to a server in versions up to, and including, 4.7.5.