High
CVE-2026-84280
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 19
Reset filters
High
CVE-2026-84281
Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta
High
CVE-2026-84279
Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job
Medium
CVE-2025-13231
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition
Medium
CVE-2025-15526
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter
Medium
CVE-2025-13439
Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter
High
CVE-2025-12570
Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload
Critical
CVE-2024-51919
Fancy Product Designer <= 6.4.3 - Unauthenticated Arbitrary File Upload
High
CVE-2024-51818
Fancy Product Designer <= 6.4.3 - Unauthenticated SQL Injection
Medium
CVE-2024-0905
Fancy Product Designer <= 6.1.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-0904
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via License Field
Medium
CVE-2024-0902
Fancy Product Designer < 6.1.81 - Authenticated (Admin+) Stored Cross-Site Scripting via Product Title
Critical
CVE-2024-0365
Fancy Product Designer <= 6.1.4 - Authenticated (Admin+) SQL Injection
High
CVE-2021-4334
Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options
Medium
CVE-2021-4335
Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions
High
CVE-2021-4096
Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File Upload
High
CVE-2021-4134
Fancy Product Designer <= 4.7.4 - Admin+ SQL Injection
Critical
CVE-2021-24370
Fancy Product Designer <= 4.6.8 - Unauthenticated Arbitrary File Upload
Medium
a80c306e-323b-4ab4-955b-4e264625731c
Fancy Product Designer <= 4.5.0 - Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.