Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

radykal — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting radykal. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Radykal primarily develops web application frameworks and content management systems, with its core use case enabling rapid deployment of dynamic websites. Historically, vulnerabilities in Radykal products frequently involve remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from insufficient input validation and insecure default configurations. While no major public security incidents have been widely documented, the 8 CVEs attributed to Radykal highlight consistent security weaknesses in its offerings, particularly in authentication mechanisms and file handling processes. These vulnerabilities typically allow attackers to execute arbitrary code or bypass security controls, underscoring the need for rigorous input sanitization and secure coding practices in Radykal's development lifecycle.

Top products by radykal: Fancy Product Designer
CVE ID Title CVSS Severity Published
CVE-2026-84280 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter — Fancy Product Designer CWE-79 7.2 High 2026-09-25
CVE-2026-84279 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job — Fancy Product Designer CWE-79 7.2 High 2026-09-25
CVE-2026-84281 Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta — Fancy Product Designer CWE-79 7.2 High 2026-09-25
CVE-2025-15526 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter — Fancy Product Designer CWE-209 5.3 Medium 2026-01-16
CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition — Fancy Product Designer CWE-362 6.5 Medium 2025-12-16
CVE-2025-13439 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter — Fancy Product Designer CWE-200 5.9 Medium 2025-12-16
CVE-2025-12570 Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload — Fancy Product Designer CWE-79 7.2 High 2025-12-12
CVE-2024-51919 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability — Fancy Product Designer CWE-434 9.0 Critical 2025-01-21
CVE-2024-51818 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability — Fancy Product Designer CWE-89 9.3 Critical 2025-01-21
CVE-2021-4334 Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options — Fancy Product Designer CWE-285 8.8 High 2023-10-20
CVE-2021-4335 Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions — Fancy Product Designer CWE-285 6.3 Medium 2023-10-20

This page lists every published CVE security advisory associated with radykal. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.