CVE-2024-51919

CVE-2024-51919 : WordPress/Fancy Product Designer plugin vulnerable to Unrestricted Upload of File with Dangerous Type (Unauthenticated Arbitrary File Upload) affecting versions n/a through 6.4.3. The issue, scored CVSS v3.1 9.0 (CRITICAL) with network attack vector, high complexity, and no privi...

WordPress Fancy Product Designer Plugin < 6.1.81 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Product Designer Type Plugin Vulnerable versions 6.1.81 Fixed in 6.1.81 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0904 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 72c8474787ba Credits Bob Matyas Requir...

WordPress Fancy Product Designer Plugin < 6.1.8 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Product Designer Type Plugin Vulnerable versions 6.1.8 Fixed in 6.1.8 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0905 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 5fb94dea6052 Credits Bob Matyas...

WordPress Fancy Product Designer Plugin < 6.1.81 is vulnerable to Cross Site Scripting (XSS)

Software Fancy Product Designer Type Plugin Vulnerable versions 6.1.81 Fixed in 6.1.81 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-0902 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 4fcfdb111964 Credits Bob Matyas Requir...