Skip to contentRadykal Fancy Product Designer vulnerabilities
- radykal fancy product designerFancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' ParameterCVE-2026-842807.2 High
- radykal fancy product designerFancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print JobCVE-2026-842797.2 High
- radykal fancy product designerFancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item MetaCVE-2026-842817.2 High
- radykal fancy product designerFancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' ParameterCVE-2025-155265.3 Medium
- radykal fancy product designerFancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race ConditionCVE-2025-132316.5 Medium
- radykal fancy product designerFancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' ParameterCVE-2025-134395.9 Medium
- radykal fancy product designerFancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File UploadCVE-2025-125707.2 High
- radykal fancy product designerWordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerabilityCVE-2024-519199.0 Critical
- radykal fancy product designerWordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerabilityCVE-2024-51818Public exploitEPSS 16.2%9.3 Critical
- radykal fancy product designerFancy Product Designer < 6.1.81 - Admin+ Cross Site ScriptingCVE-2024-09045.9 Medium
- radykal fancy product designerFancy Product Designer < 6.1.8 - Reflected Cross Site ScriptingCVE-2024-09056.3 Medium
- radykal fancy product designerFancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product TitleCVE-2024-09024.8 Medium
- radykal fancy product designerFancy Product Designer < 6.1.5 - Admin+ SQL InjectionCVE-2024-03656.5 Medium
- radykal fancy product designerFancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_optionsCVE-2021-43348.8 High
- radykal fancy product designerFancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX ActionsCVE-2021-43356.3 Medium
- fancy-product-designer fancy product designerFancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File UploadCVE-2021-40968.8 High
- fancy product designer product designer, radykal fancy product designer +1 moreFancy Product Designer <= 4.7.4 Admin+ SQL InjectionCVE-2021-41347.2 High
- radykal fancy product designerFancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCECVE-2021-24370EPSS 47.4%9.8 Critical