Rradykal

Products

Exploited and recent CVEs

• CVE-2026-84280 High 7.2 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter 0.3%
• CVE-2026-84279 High 7.2 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job 0.2%
• CVE-2026-84281 High 7.2 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta 0.2%
• CVE-2025-15526 Medium 5.3 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter 0.3%
• CVE-2025-13231 Medium 6.5 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition 0.2%
• CVE-2025-13439 Medium 5.9 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter 0.3%
• CVE-2025-12570 High 7.2 Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload 0.2%
• CVE-2024-51919 Critical 9.0 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability 0.5%
• CVE-2024-51818 Critical 9.3 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability 16.2%
• CVE-2021-4334 High 8.8 Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options 0.7%
• CVE-2021-4335 Medium 6.3 Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions 0.4%