WordPress Fancy Product Designer plugin <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability

Unauthenticated Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by WordFence in WordPress Plugin Fancy Product Designer versions = 6.4.8...

CVE-2025-12570

creationtimestamp| type| source ---|---|--- 2025-12-12 07:26:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7rkri4as322 2025-12-12 08:11:52+00:00| seen| https://gist.github.com/Darkcrai86/dd3ba4afb5fc1bcdb26fcc5ae6cc130a 2025-12-12 09:40:21+00:00| seen|...