Plugin icon

Fancy Product Designer

fancy-product-designer

Vulnerabilities:

16

Last Updated:

December 5, 2025

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter
Fixed in
Fixed in 6.5.0
CVSS
5.9 (medium)
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Full Path Disclosure via 'pdf' Parameter
Fixed in
Fixed in 6.5.0
CVSS
5.3 (medium)
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Server-Side Request Forgery via Race Condition
Fixed in
Fixed in 6.5.0
CVSS
6.5 (medium)
Published
2025-12-11
Title
Fancy Product Designer < 6.5.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Fixed in
Fixed in 6.5.0
CVSS
7.2 (high)
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated Arbitrary File Upload
Fixed in
Fixed in 6.4.4
CVSS
9.8 (critical)
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated SQL Injection
Fixed in
Fixed in 6.4.4
CVSS
7.5 (high)
Published
2024-04-15
Title
Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting
Fixed in
Fixed in 6.1.81
CVSS
3.5 (low)
Published
2024-04-05
Title
Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting
Fixed in
Fixed in 6.1.8
CVSS
7.1 (high)
Published
2024-03-25
Title
Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product Title
Fixed in
Fixed in 6.1.81
CVSS
3.5 (low)
Published
2024-02-20
Title
Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
Fixed in
Fixed in 6.1.5
CVSS
4.1 (medium)
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Access and Modification
Fixed in
Fixed in 4.7.0
CVSS
6.3 (medium)
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Site Options Modification
Fixed in
Fixed in 4.7.0
CVSS
8.8 (high)
Published
2022-04-14
Title
Fancy Product Designer < 4.7.6 - Arbitrary File Upload via CSRF
Fixed in
Fixed in 4.7.6
CVSS
8.8 (high)
Published
2022-02-08
Title
Fancy Product Designer < 4.7.5 - Admin+ SQL Injection
Fixed in
Fixed in 4.7.5
CVSS
6.8 (medium)
Published
2021-06-01
Title
Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE
Fixed in
Fixed in 4.6.9
CVSS
10.0 (critical)
Published
2020-11-18
Title
Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 4.5.1
CVSS
6.1 (medium)