Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Fancy Product Designer — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Fancy Product Designer, with AI-generated Chinese analysis, references, and POCs.

This page aggregates known security weaknesses for the Fancy Product Designer software, categorized by vendor advisories and specific vulnerability tags. The collection encompasses a wide spectrum of issues, including buffer overflows, remote code execution flaws, and privilege escalation vectors, spanning the product's entire release history from its initial launch to the most recent version. Users can utilize this resource to track official security advisories issued by the vendor, gain a comprehensive understanding of how specific weakness classes manifest within this application, or review the complete vulnerability timeline to assess the security posture of any installed version. The data presented here is derived from public disclosures and vendor communications, offering a centralized view for security analysts and administrators to evaluate risk without navigating disparate sources. By examining the patterns of reported flaws, stakeholders can identify recurring architectural issues or configuration errors that may require immediate remediation or long-term design changes. This aggregation serves as a critical reference for maintaining the integrity of systems utilizing Fancy Product Designer, ensuring that organizations remain informed about potential threats and can implement appropriate defensive measures based on historical data and current threat intelligence.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-84280 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter CWE-79 7.2 High 2026-09-25
CVE-2026-84279 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job CWE-79 7.2 High 2026-09-25
CVE-2026-84281 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta CWE-79 7.2 High 2026-09-25
CVE-2025-15526 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter CWE-209 5.3 Medium 2026-01-16
CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition CWE-362 6.5 Medium 2025-12-16
CVE-2025-13439 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter CWE-200 5.9 Medium 2025-12-16
CVE-2025-12570 Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CWE-79 7.2 High 2025-12-12
CVE-2024-51919 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability CWE-434 9.0 Critical 2025-01-21
CVE-2024-51818 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability CWE-89 9.3 Critical 2025-01-21
CVE-2024-0904 Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting 4.8AI Medium AI 2024-05-06
CVE-2024-0905 Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting 6.1AI Medium AI 2024-04-26
CVE-2024-0902 Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product Title 4.8AI Medium AI 2024-04-15
CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection 7.2 - 2024-03-18
CVE-2021-4334 Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options CWE-285 8.8 High 2023-10-20
CVE-2021-4335 Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions CWE-285 6.3 Medium 2023-10-20
CVE-2021-4096 Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File Upload CWE-352 8.8 High 2022-04-19
CVE-2021-24370 Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE CWE-434 9.8 - 2021-06-21

All 17 known CVE vulnerabilities affecting Fancy Product Designer with full Chinese analysis, references, and POCs where available.