Radykal vulnerabilities
We track 6 vulnerabilities in Radykal products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 25, 2026.
Latest Radykal vulnerabilities
- 7.2 High severity
Fancy Product Designer: Improper Neutralization of Input During Web Page Generation
The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter in all versions up to, and including, 6.5.2 due to insufficient input sanitization and output escaping. This makes it
- 7.2 High severity
Fancy Product Designer: Improper Neutralization of Input During Web Page Generation
The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta in all versions up to, and including, 6.5.2 due to insufficient input sanitization and output escaping. This makes it
- 7.2 High severity
Fancy Product Designer: Improper Neutralization of Input During Web Page Generation
The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'output_format' parameter in all versions up to, and including, 6.5.2 due to insufficient input sanitization and output escaping. This makes it possible for un
- 7.2 High severity
Fancy Product Designer: Improper Neutralization of Input During Web Page Generation
The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 6.4.8 due to insufficient input sanitization and output escaping in the data-to-image.php and pdf-to-image.p
- 9.0 Critical severity
Fancy Product Designer: Unrestricted Upload of File with Dangerous Type
Unrestricted Upload of File with Dangerous Type vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through <= 6.4.3.
- 9.3 Critical severity
Fancy Product Designer: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in radykal Fancy Product Designer fancy-product-designer.This issue affects Fancy Product Designer: from n/a through <= 6.4.3.