CVE-2021-4096

The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the FPDAdminImport class that makes it possible for attackers to upload malicious files that could be used to gain webshell access to a server in versions up to, and including, 4.7.5...

WordPress plugin Fancy Product Designer跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. The WordPress plugin is an application plugin. A cross-site request forgery vulnerability exists in the WordPress plugin Fancy Product Designer, which...

PT-2022-11347

Name of the Vulnerable Software and Affected Versions The Fancy Product Designer plugin for WordPress versions up to, and including, 4.7.5 Description The issue allows attackers to perform Cross-Site Request Forgery via the FPD Admin Import class, enabling them to upload malicious files. These...