Not rated
CVE-2021-24370 The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files,…
Description
The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Fancy Product Designer 4.6 | earliest → < 4.6.9 | 4.6.9 |
Other CVEs of Fancy Product Designer
The 7 CVEs of Fancy Product Designer →
CVE-2024-0904
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
5.9
Medium
CVE-2024-0905
The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it…
6.3
Medium
CVE-2024-0902
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
4.3
Medium
CVE-2024-0365
The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before…
6.5
Medium