Fancy Product Designer

Explore Fancy Product Designer vulnerabilities across all versions. Currently tracking 16 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSHigh

7.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Fancy Product Designer vulnerabilities before they are exploited.

Vulnerability Records

16 records


2025-12-15 00:00	Fancy Product Designer \| WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter Fancy Product Designer <= 6.4.8	`CVE-2025-13439`	5.9 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-12-15 00:00	Fancy Product Designer \| WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter Fancy Product Designer <= 6.4.8	`CVE-2025-15526`	5.3 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-12-15 00:00	Fancy Product Designer \| WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition Fancy Product Designer <= 6.4.8	`CVE-2025-13231`	6.5 Medium	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-12-11 18:11	Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload Fancy Product Designer <= 6.4.8	`CVE-2025-12570`	7.2 High	Muhammad Zeeshan (Xib3rR4dAr)	Yes
2025-01-03 00:00	Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection Fancy Product Designer <= 6.4.3	`CVE-2024-51818`	7.5 High	Rafie Muhammad	Yes
2025-01-03 00:00	Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File Upload Fancy Product Designer <= 6.4.3	`CVE-2024-51919`	9.8 Critical	Rafie Muhammad	Yes
2024-04-26 00:00	Fancy Product Designer <= 6.1.7 - Reflected Cross-Site Scripting Fancy Product Designer <= 6.1.7	`CVE-2024-0905`	6.1 Medium	Bob Matyas	Yes
2024-04-15 00:00	Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via License Field Fancy Product Designer < 6.1.81	`CVE-2024-0904`	4.4 Medium	Bob Matyas	Yes
2024-03-25 00:00	Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via Product Title Fancy Product Designer < 6.1.81	`CVE-2024-0902`	4.4 Medium	Bob Matyas	Yes
2024-02-20 00:00	Fancy Product Designer <= 6.1.4 - Authenticated (Admin+) SQL Injection Fancy Product Designer <= 6.1.4	`CVE-2024-0365`	9.1 Critical	Ivan Spiridonov (xbz0n)	Yes

Showing 1–10 of 16 reports