目標達成 すべての支援者に感謝 — 100%達成しました！

目標: 1000 CNY · 調達済み: 1336 CNY

100%
コーヒーを一杯おごる

Fancy Product Designer 产品漏洞列表 / CVE 中文分析 14

Fancy Product Designer 产品相关 14 条漏洞，AI 中文标题与摘要、CVSS、POC 一站汇总。

Fancy Product Designer 是一款由 WooCommerce 开发的 WordPress 插件，本页面聚合了该组件存在的安全漏洞信息。收录内容涵盖跨站脚本、路径遍历及认证绕过等典型弱点，时间范围自 2019 年起至今。读者可通过此页面追踪特定厂商的安全公告动态，深入理解该产品历史版本中存在的常见安全风险，并检索相关漏洞详情以辅助进行安全审计或漏洞修复工作。

ベンダー: Unknown

CVE IDタイトルCVSS深刻度公開日
CVE-2025-15526 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter CWE-209 5.3 Medium2026-01-16
CVE-2025-13231 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition CWE-362 6.5 Medium2025-12-16
CVE-2025-13439 Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter CWE-200 5.9 Medium2025-12-16
CVE-2025-12570 Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload CWE-79 7.2 High2025-12-12
CVE-2024-51919 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability CWE-434 9.0 Critical2025-01-21
CVE-2024-51818 WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability CWE-89 9.3 Critical2025-01-21
CVE-2024-0904 Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting 4.8AIMediumAI2024-05-06
CVE-2024-0905 Fancy Product Designer < 6.1.8 - Reflected Cross Site Scripting 6.1AIMediumAI2024-04-26
CVE-2024-0902 Fancy Product Designer < 6.1.81 - Admin+ Cross Site Scripting via Product Title 4.8AIMediumAI2024-04-15
CVE-2024-0365 Fancy Product Designer < 6.1.5 - Admin+ SQL Injection 7.2 -2024-03-18
CVE-2021-4334 Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options CWE-285 8.8 High2023-10-20
CVE-2021-4335 Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actions CWE-285 6.3 Medium2023-10-20
CVE-2021-4096 Fancy Product Designer <= 4.7.5 - Cross-Site Request Forgery to Arbitrary File Upload CWE-352 8.8 High2022-04-19
CVE-2021-24370 Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE CWE-434 9.8 -2021-06-21

Fancy Product Designer 产品累计公开 14 条 CVE 漏洞，本页提供按时间倒序的完整列表，包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。