Critical WordPress Plugin Used by 20,000+ Sites Left Exposed to Remote Attacks

Critical security flaws discovered in Fancy Product Designer WordPress plugin affect over 20,000 installations. Two unpatched vulnerabilities - an Arbitrary File Upload (CVE-2024-51919) and SQL Injection (CVE-2024-51818) - pose severe risks including remote code execution and unauthorized ...