CVE-2021-4096: Radykal Fancy Product Designer

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The Fancy Product Designer plugin for WordPress is vulnerable to Cross-Site Request Forgery via the FPD_Admin_Import class that makes it possible for attackers to upload malicious files that could be used to gain webshell access to a server in versions up to, and including, 4.7.5.

Affected products

• Radykal Fancy Product Designer: up to and including 4.7.5

Published 2022-04-19. Last modified 2026-06-17.