Information disclosure in Radykal Fancy Product Designer
CVE-2025-13439
The Fancy Product Designer plugin for WordPress is vulnerable to Information Disclosure and PHAR Deserialization in all versions up to, and including, 6.4.8. This is due to insufficient validation of user-supplied input in the 'url' parame…
Vulnerability class: Information Disclosure
EPSS: 0.003 (17.3th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Radykal Fancy Product Designer — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-13439?
- CVE-2025-13439 is a medium-severity vulnerability in Radykal Fancy Product Designer, classified under Information Disclosure. CVSS score: 5.9/10. Published 2025-12-16.
- How severe is CVE-2025-13439?
- Medium severity. CVSS v3 base score is 5.9 out of 10.