2 matches found
CVE-2021-4334: Improper Authorization
The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a missing capability check on the fpdupdateoptions function in versions up to, and including, 4.6.9. This makes it possible for authenticated attackers with subscriber-level permissio...
8.8CVSS7.6AI score0.00668EPSS
SaveExploits0References3
WordPress Plugin Fancy Product Designer Security Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...
8.8CVSS6.2AI score0.00668EPSS
SaveExploits0References3
20