CVE-2021-24370: Radykal Fancy Product Designer

Critical severity, CVSS 9.8. EPSS: 47.4% chance of exploitation in the next 30 days.

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution.

Affected products

• Radykal Fancy Product Designer: before 4.6.9 (fixed in 4.6.9)

Published 2021-06-21. Last modified 2026-06-17.