agentprime: radykal-fancy-product-designerEvery new CVE for radykal-fancy-product-designer.https://agentprime.io/CVE-2026-84280: Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameterhttps://agentprime.io/advisories/CVE-2026-84280/https://agentprime.io/advisories/CVE-2026-84280/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 07:40:29 GMTCVECVE-2026-84279: Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Jobhttps://agentprime.io/advisories/CVE-2026-84279/https://agentprime.io/advisories/CVE-2026-84279/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:53 GMTCVECVE-2026-84281: Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Metahttps://agentprime.io/advisories/CVE-2026-84281/https://agentprime.io/advisories/CVE-2026-84281/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 06:39:52 GMTCVECVE-2025-15526: Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameterhttps://agentprime.io/advisories/CVE-2025-15526/https://agentprime.io/advisories/CVE-2025-15526/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 16 Jan 2026 04:44:34 GMTCVECVE-2025-13231: Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Conditionhttps://agentprime.io/advisories/CVE-2025-13231/https://agentprime.io/advisories/CVE-2025-13231/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 08:20:24 GMTCVECVE-2025-13439: Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameterhttps://agentprime.io/advisories/CVE-2025-13439/https://agentprime.io/advisories/CVE-2025-13439/CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Dec 2025 07:21:05 GMTCVECVE-2025-12570: Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Uploadhttps://agentprime.io/advisories/CVE-2025-12570/https://agentprime.io/advisories/CVE-2025-12570/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Dec 2025 06:32:57 GMTCVECVE-2024-51919: WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerabilityhttps://agentprime.io/advisories/CVE-2024-51919/https://agentprime.io/advisories/CVE-2024-51919/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jan 2025 13:40:33 GMTCVEcriticalCVE-2024-51818: WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerabilityhttps://agentprime.io/advisories/CVE-2024-51818/https://agentprime.io/advisories/CVE-2024-51818/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. CVSS score 9.3 (7.0 or more) and EPSS 0.16 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Tue, 21 Jan 2025 13:40:33 GMTCVEcriticalCVE-2021-4334: Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_optionshttps://agentprime.io/advisories/CVE-2021-4334/https://agentprime.io/advisories/CVE-2021-4334/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Oct 2023 07:29:38 GMTCVECVE-2021-4335: Fancy Product Designer <= 4.6.9 - Insufficient Authorization on Mulitple AJAX Actionshttps://agentprime.io/advisories/CVE-2021-4335/https://agentprime.io/advisories/CVE-2021-4335/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 20 Oct 2023 06:35:28 GMTCVE