6.5
Moyenne
CVE-2024-0365 The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before…
Description
The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by adminstrators.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Fancy Product Designer 6.1 | premières → < 6.1.5 | 6.1.5 |
| fancy_product_designer 6.1 | premières → < 6.1.5 | 6.1.5 |
Autres CVE de Fancy Product Designer
Les 7 CVE de Fancy Product Designer →
CVE-2024-0904
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
5.9
Moyenne
CVE-2024-0905
The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it…
6.3
Moyenne
CVE-2024-0902
The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could…
4.3
Moyenne
CVE-2021-4334
The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a…
8.8
Élevée