WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
fancy-facebook-comments
Published
2026-10-15
Title
Fancy Comments WordPress <= 1.2.21 - Reflected Cross-Site Scripting
Slug
fancy-gallery
Published
2024-11-15
Title
Gallery Manager <= 1.6.58 - Reflected Cross-Site Scripting
Slug
fancy-image-show
Published
2026-05-11
Title
Fancy Image Show <= 9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Slug
fancy-product-designer
Published
2020-11-18
Title
Fancy Product Designer < 4.5.1 - Unauthenticated Stored Cross-Site Scripting
Slug
fancy-product-designer
Published
2021-06-01
Title
Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE
Slug
fancy-product-designer
Published
2022-02-08
Title
Fancy Product Designer < 4.7.5 - Admin+ SQL Injection
Slug
fancy-product-designer
Published
2022-04-14
Title
Fancy Product Designer < 4.7.6 - Arbitrary File Upload via CSRF
Slug
fancy-product-designer
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Access and Modification
Slug
fancy-product-designer
Published
2023-04-05
Title
Fancy Product Designer < 4.7.0 - Subscriber+ Unauthorized Site Options Modification
Slug
fancy-product-designer
Published
2024-02-20
Title
Fancy Product Designer < 6.1.5 - Admin+ SQL Injection
Slug
fancy-product-designer
Published
2024-03-25
Title
Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product Title
Slug
fancy-product-designer
Published
2024-04-05
Title
Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting
Slug
fancy-product-designer
Published
2024-04-15
Title
Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting
Slug
fancy-product-designer
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated SQL Injection
Slug
fancy-product-designer
Published
2025-01-03
Title
Fancy Product Designer < 6.4.4 - Unauthenticated Arbitrary File Upload
Slug
fancy-product-designer
Published
2025-12-11
Title
Fancy Product Designer < 6.5.0 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Slug
fancy-product-designer
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter
Slug
fancy-product-designer
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Server-Side Request Forgery via Race Condition
Slug
fancy-product-designer
Published
2025-12-15
Title
Fancy Product Designer | WooCommerce WordPress < 6.5.0 - Unauthenticated Full Path Disclosure via 'pdf' Parameter
Slug
fancy-product-designer
Published
2026-09-24
Title
Fancy Product Designer < 6.5.3 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta
Slug
fancy-product-designer
Published
2026-09-24
Title
Fancy Product Designer < 6.5.3 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job
Slug
fancy-product-designer
Published
2026-09-24
Title
Fancy Product Designer < 6.5.3 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter
Slug
fancy-roller-scroller
Published
2024-12-11
Title
Fancy Roller Scroller < 1.4.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
fancy-testimonials
Published
2026-06-17
Title
Fancy Testimonials <= 1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Slug
fancy-user-listing
Published
2024-11-08
Title
Fancy User List <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting