Skip to content

Known vulnerabilities in radykal Fancy Product Designer

Is your version affected?

CVE Summary Score Published
CVE-2026-84280 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Order… 7.2 High Sep 25, 2026
CVE-2026-84279 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'output_format'… 7.2 High Sep 25, 2026
CVE-2026-84281 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'productTitle' in… 7.2 High Sep 25, 2026
CVE-2025-15526 The Fancy Product Designer plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and… 5.3 Medium Jan 16, 2026
CVE-2025-13231 The Fancy Product Designer plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to,… 6.5 Medium Dec 16, 2025
CVE-2025-13439 The Fancy Product Designer plugin for WordPress is vulnerable to Information Disclosure and PHAR Deserialization in… 5.9 Medium Dec 16, 2025
CVE-2025-12570 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all… 7.2 High Dec 12, 2025
CVE-2024-51919 Unrestricted Upload of File with Dangerous Type vulnerability in radykal Fancy Product Designer… 9.0 Critical Jan 21, 2025
CVE-2024-51818 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in radykal Fancy… 9.3 Critical Jan 21, 2025
CVE-2021-4334 The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a… 8.8 High Oct 20, 2023
CVE-2021-4335 The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized access to data and modification of… 6.3 Medium Oct 20, 2023

Other radykal products