Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Fancy Product Designer — Vulnerabilities & Security Advisories 17

All 17 CVE vulnerabilities found in Fancy Product Designer, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities affecting the Fancy Product Designer software, specifically categorized by vulnerability type and associated vendor tags. It collects a comprehensive history of identified security flaws, including memory corruption issues, input validation errors, and privilege escalation bugs, covering reporting periods from initial product releases through the most recent quarterly updates. Readers can utilize this aggregation to track the vendor's pattern of security advisories, gain a deeper understanding of specific weakness classes prevalent in design-oriented applications, and review the complete vulnerability history for Fancy Product Designer to assess current security posture and potential risk exposure. By centralizing these records, the page serves as a reference point for security analysts and developers seeking to identify recurring issues or evaluate the effectiveness of past patches without navigating disparate vendor databases or individual bug reports.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2026-84280 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter CWE-79 7.2 High 2026-09-25
CVE-2026-84279 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job CWE-79 7.2 High 2026-09-25
CVE-2026-84281 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta CWE-79 7.2 High 2026-09-25
CVE-2025-15526 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter CWE-209 5.3 Medium 2026-01-16
CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition CWE-362 6.5 Medium 2025-12-16
CVE-2025-13439 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter CWE-200 5.9 Medium 2025-12-16
CVE-2025-12570 Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CWE-79 7.2 High 2025-12-12
CVE-2024-51919 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability CWE-434 9.0 Critical 2025-01-21
CVE-2024-51818 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability CWE-89 9.3 Critical 2025-01-21
CVE-2024-0904 Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting 4.8AI Medium AI 2024-05-06
CVE-2024-0905 Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting 6.1AI Medium AI 2024-04-26
CVE-2024-0902 Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product Title 4.8AI Medium AI 2024-04-15
CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection 7.2 - 2024-03-18
CVE-2021-4334 Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options CWE-285 8.8 High 2023-10-20
CVE-2021-4335 Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions CWE-285 6.3 Medium 2023-10-20
CVE-2021-4096 Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File Upload CWE-352 8.8 High 2022-04-19
CVE-2021-24370 Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE CWE-434 9.8 - 2021-06-21

All 17 known CVE vulnerabilities affecting Fancy Product Designer with full Chinese analysis, references, and POCs where available.