CVE-2021-24370

Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE

The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution.

Affected

Fancy Product Designer

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

47.37% chance of exploitation in the next 30 days, 99th percentile

Nuclei

critical · CWE-434

Published

2021-06-21

Updated

2024-08-03

Proof-of-concept exploits (4)

• https://lists.openwall.net/full-disclosure/2020/11/17/2
• https://seclists.org/fulldisclosure/2020/Nov/30
• https://wpscan.com/vulnerability/82c52461-1fdc-41e4-9f51-f9dd84962b38
• https://www.wordfence.com/blog/2021/06/critical-0-day-in-fancy-product-designer-under-act…

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2021/CVE-2021-24370.yaml

Security advisories

• https://www.secpod.com/blog/critical-zero-day-flaw-actively-exploited-in-wordpress-fancy-…
• https://www.wordfence.com/blog/2021/06/critical-0-day-in-fancy-product-designer-under-act…

References

• CVE Record
• NVD entry