radykal vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20255
3. 20264

Newest CVEs

• CVE-2026-84280

  Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter

  radykal · Fancy Product Designer

  High7.2
• CVE-2026-84279

  Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job

  radykal · Fancy Product Designer

  High7.2
• CVE-2026-84281

  Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta

  radykal · Fancy Product Designer

  High7.2
• CVE-2025-15526

  Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Full Path Disclosure via 'pdf' Parameter

  radykal · Fancy Product Designer

  Medium5.3
• CVE-2025-13231

  Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Server-Side Request Forgery via Race Condition

  radykal · Fancy Product Designer

  Medium6.5
• CVE-2025-13439

  Fancy Product Designer | WooCommerce WordPress <= 6.4.8 - Unauthenticated Information Disclosure and PHAR Deserialization via 'url' Parameter

  radykal · Fancy Product Designer

  Medium5.9
• CVE-2025-12570

  Fancy Product Designer <= 6.4.8 - Unauthenticated Stored Cross-Site Scripting via SVG File Upload

  radykal · Fancy Product Designer

  High7.2
• CVE-2024-51919

  WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated Arbitrary File Upload vulnerability

  radykal · Fancy Product Designer

  Critical9.0
• CVE-2024-51818

  WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability

  radykal · Fancy Product Designer

  Critical9.3
• CVE-2021-4334

  Fancy Product Designer <= 4.6.9 - Insufficient Authorization to Arbitrary Options Update via fpd_update_options

  radykal · Fancy Product Designer

  High8.8