Beveiligingsadvies

CVE-2021-4096

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-04-19 20:26:38

Laatst bijgewerkt 2025-02-07 20:48:36

Toegewezen door Wordfence

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the FPD_Admin_Import class that makes it possible for attackers to upload malicious files that could be used to gain webshell access to a server in versions up to, and including, 4.7.5.

← Alle CVE's bekijken Bekijk op cve.org ↗