Lucene search

K
patchstackLin YuPATCHSTACK:CD2800C5A5E11CDAE7A0AC7EFC6944F3
HistoryApr 14, 2022 - 12:00 a.m.

WordPress Fancy Product Designer plugin <= 4.7.5 – Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary File Upload

2022-04-1400:00:00
Lin Yu
patchstack.com
15

0.001 Low

EPSS

Percentile

32.0%

Cross-Site Request Forgery (CSRF) vulnerability leading to Arbitrary File Upload discovered by Lin Yu in WordPress Fancy Product Designer plugin (versions <= 4.7.5).

Solution

           Update the WordPress Fancy Product Designer plugin to the latest available version (at least 4.7.6).
CPENameOperatorVersion
fancy product designerle4.7.5

0.001 Low

EPSS

Percentile

32.0%

Related for PATCHSTACK:CD2800C5A5E11CDAE7A0AC7EFC6944F3