The vulnerability CVE-2024-51919 affects the Fancy Product Designer plugin by radykal, allowing unauthenticated attackers to upload files of dangerous types without restriction. This can enable attackers to execute arbitrary code remotely, resulting in full system compromise. The issue impacts all versions up to and including 6.4.3. The CVSS 3.1 base score is 9.0, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, and complete impact on confidentiality, integrity, and availability.

Successful exploitation of this vulnerability can lead to remote code execution, allowing attackers to fully compromise the affected system. This includes unauthorized access to sensitive data, modification or deletion of data, and disruption of service availability. The critical CVSS score underscores the severity of the impact.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict file upload permissions and monitor for suspicious file uploads as a precaution. Avoid deploying affected versions in production environments where possible.