title: Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE
description: The Fancy Product Designer WordPress plugin before 4.6.9 allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution.
problem types: CWE-434 Unrestricted Upload of File with Dangerous Type
affected:
{
vendor: Unknown
product: Fancy Product Designer
versions:
version: 4.6.9, status: affected, lessThan: 4.6.9, versionType: custom
}