CVE-2024-51919

[CVE-2024-51919: CRITICAL] Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3.#cybersecurity,#vulnerability https://t.co/PGjz6LecKW https://t.co/s3NIQf7xyu

CVE-2024-51919 Unrestricted Upload of File with Dangerous Type vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3. https://t.co/1dufvFKeHG

WordPress Fancy Product Designer の脆弱性 CVE-2024-51919／51818：20,000以上のサイトが未パッチ！ https://t.co/6OzKsbtaDM WooCommerce 用に開発された、WordPress の Fancy Product Designer… https://t.co/FuXwChAyR5

CVE-2024-51919,CVE-2024-51818 alert 🚨 Wordpress Plugin Fancy Product Arbitrary File Upload and Unauthenticated SQL Injection The vulnerability is actively exploited in the wild and has been integrated into Patrowl. Our customers assets are protected. 🦉 #CyberSecurity #Wordpress

WordPressの有料プラグインFancy Product Designerに重大(Critical)な脆弱性。2024/3/18報告だが未修正。CVE-2024-51919はCVSSスコア9.0で、遠隔コード実行につながる未認証での任意ファイルアップロード。CVE-2024-51818はCVSSスコア9.3で、未認証でのSQLインジェクション。 https://t.co/db5oruISbn