CVE-2021-24370

Mô tả

Tham khảo

• lists.openwall.net/full-disclosure/2020/11/17/2 · Exploit
• seclists.org/fulldisclosure/2020/Nov/30 · Exploit
• wpscan.com/vulnerability/82c52461-1fdc-41e4-9f51-f9dd84962b38 · Exploit
• secpod.com/blog/critical-zero-day-flaw-actively-exploited-in-wordpress-fancy-product-designer-plugin · Exploit
• wordfence.com/blog/2021/06/critical-0-day-in-fancy-product-designer-under-active-attack · Exploit

Lỗ hổng khác của fancy product designer

• CVE-2024-0904TRUNG BÌNH 5.9The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could allow high privileg…
• CVE-2024-0905TRUNG BÌNH 6.3The Fancy Product Designer WordPress plugin before 6.1.8 does not sanitise and escape a parameter before outputting it back in the page, lea…
• CVE-2024-0902TRUNG BÌNH 4.8The Fancy Product Designer WordPress plugin before 6.1.81 does not sanitise and escape some of its settings, which could allow high privileg…
• CVE-2024-0365TRUNG BÌNH 6.5The Fancy Product Designer WordPress plugin before 6.1.5 does not properly sanitise and escape a parameter before using it in a SQL statemen…
• CVE-2021-4334CAO 8.8The Fancy Product Designer plugin for WordPress is vulnerable to unauthorized modification of site options due to a missing capability check…