Lucene search
WpvulndbWPVDB-ID:810B0195-9D0E-429F-9E65-B685A4B56277HistoryFeb 08, 2022 - 12:00 a.m.
Fancy Product Designer < 4.7.5 - Admin+ SQL Injection
2022-02-0800:00:00
wpscan.com
19
0.001 Low
EPSS
Percentile
29.8%
The plugin is vulnerable to SQL Injection due to insufficient escaping and validation of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensitive information.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fancy-product-designer | lt | 4.7.5 |
Related
cnvd
cnvd
WordPress plugin Fancy Product Designer SQL injection vulnerability
2022-02-18 00:00:00
cve
cve
CVE-2021-4134
2022-02-16 17:15:11
cvelist
cvelist
CVE-2021-4134 Fancy Product Designer <= 4.7.4 Admin+ SQL Injection
2022-02-16 16:38:05
prion
prion
Sql injection
2022-02-16 17:15:00
nvd
nvd
CVE-2021-4134
2022-02-16 17:15:11