Exposing the Risks: Flaws in Fancy Product Designer Plugins for WordPress
Introduction Two critical vulnerabilities have been identified in the Fancy Product Designer plugin for WordPress, posing significant security risks to websites utilizing this tool. These flaws, an unauthenticated arbitrary file upload vulnerability (CVE-2024-51919) and an unauthenticated SQL injection vulnerability (CVE-2024-51818), remain unpatched as of version 6.4.3. This article examines the vulnerabilities, their implications, and the…