CVE-2021-24370 Scanner

The Fancy Product Designer plugin for WordPress is a popular and powerful tool that allows users to create customized and interactive product designs, such as t-shirts, mugs, phone cases, and more, directly on their website. It is widely used by eCommerce businesses and online retailers as it enhances the customers’ shopping experience and increases their engagement with the brand. 

However, the plugin was recently found to have a critical vulnerability, CVE-2021-24370, which can be exploited by unauthenticated attackers to upload arbitrary files, leading to remote code execution. This means that cybercriminals can gain access to sensitive information, inject malicious code, and take control of the entire web application. The vulnerability affects all versions of Fancy Product Designer plugin before version 4.6.9.

When this vulnerability is exploited, it can cause severe consequences for website owners, such as data loss, website downtime, breach of confidential customer information, reputational damage, and financial losses. Attackers can use the vulnerability to install malware that can steal sensitive data or launch Distributed Denial of Service (DDoS) attacks against other websites. 

In conclusion, business owners and website administrators need to be aware of the CVE-2021-24370 vulnerability in the Fancy Product Designer plugin for WordPress and take the necessary steps to prevent it from being exploited. By using a reliable security platform like s4e.io, companies can stay on top of potential exploits and protect their digital assets from malicious actors. Don't take chances with your website's security, and act now to safeguard your business and protect your customers' data.

REFERENCES

• https://lists.openwall.net/full-disclosure/2020/11/17/2
• https://seclists.org/fulldisclosure/2020/Nov/30
• https://wpscan.com/vulnerability/82c52461-1fdc-41e4-9f51-f9dd84962b38
• https://www.wordfence.com/blog/2021/06/critical-0-day-in-fancy-product-designer-under-active-attack/