CVE-2021-4134

The Fancy Product Designer WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the ID parameter found in the ~/inc/api/class-view.php file which allows attackers with administrative level permissions to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 4.7.4.

• CWE-89
• CWE-89

• https://support.fancyproductdesigner.com/support/discussions/topics/13000031264Release Notes, Vendor Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4134Exploit, Third Party Advisory
• https://support.fancyproductdesigner.com/support/discussions/topics/13000031264Release Notes, Vendor Advisory
• https://www.wordfence.com/vulnerability-advisories/#CVE-2021-4134Exploit, Third Party Advisory

Published

Feb 16, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41334Windows Desktop Bridge Elevation of Privilege Vulnerability7
• CVE-2021-41335Windows Kernel Elevation of Privilege Vulnerability7.8
• CVE-2021-41336Windows Kernel Information Disclosure Vulnerability5.5
• CVE-2021-41337Active Directory Security Feature Bypass Vulnerability4.9
• CVE-2021-41338Windows AppContainer Firewall Rules Security Feature Bypass …5.5
• CVE-2021-41339Microsoft DWM Core Library Elevation of Privilege Vulnerabil…4.7
• CVE-2021-41340Windows Graphics Component Remote Code Execution Vulnerabili…7.8
• CVE-2021-41342Windows MSHTML Platform Remote Code Execution Vulnerability6.8
• CVE-2021-41343Windows Fast FAT File System Driver Information Disclosure V…5.5
• CVE-2021-41344Microsoft SharePoint Server Remote Code Execution Vulnerabil…8.1
• CVE-2021-41345Storage Spaces Controller Elevation of Privilege Vulnerabili…7.8
• CVE-2021-41346Console Window Host Security Feature Bypass Vulnerability5.3