6.5
Medium
CVE-2024-0365 The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before…
Description
The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fancy Product Designer 6.1 | earliest → < 6.1.5 | 6.1.5 |
| fancy_product_designer 6.1 | earliest → < 6.1.5 | 6.1.5 |
Other CVEs of Fancy Product Designer
The 7 CVEs of Fancy Product Designer →
CVE-2024-0904
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
5.9
Medium
CVE-2024-0905
The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it…
6.3
Medium
CVE-2024-0902
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
4.3
Medium
CVE-2021-4334
The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a…
8.8
High