CVE-2024-51818: WordPress Fancy Product Designer plugin <= 6.4.3 - Unauthenticated SQL Injection vulnerability
9.3
CVSS
Description
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Fancy Product Designer. This issue affects Fancy Product Designer: from n/a through 6.4.3.
Classification
CVE ID: CVE-2024-51818
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.3
Affected Products
Vendor: NotFound
Product: Fancy Product Designer
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.7% (scored less or equal to compared to others)
EPSS Date: 2025-02-19 (when was this score calculated)