--- title: Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day description: Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day image: https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-689019766.jpg --- [Skip to the main content.](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#main-content) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) [![OTT powerd by VN big](https://ontimetech.valeonetworks.com/hs-fs/hubfs/OTT%20powerd%20by%20VN%20big.png?width=500&height=175&name=OTT%20powerd%20by%20VN%20big.png "OTT powerd by VN big")](https://ontimetech.valeonetworks.com) - [Services](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) Toggle Menu Toggle Menu [415-294-5250](tel:4152945250) [Client Portal](https://portal.Valeonetworks.com) - [Services *Toggle Menu*](https://ontimetech.valeonetworks.com/our-services/) - [Managed It Services](https://ontimetech.valeonetworks.com/our-services/managed-it/) - [Cybersecurity](https://ontimetech.valeonetworks.com/our-services/cybersecurity/) - [Cloud Solutions](https://ontimetech.valeonetworks.com/our-services/cloud-solutions/) - [Compliance](https://ontimetech.valeonetworks.com/our-services/compliance/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources *Toggle Menu*](https://ontimetech.valeonetworks.com/resources/) - [Blog](https://ontimetech.valeonetworks.com/blog) - [About *Toggle Menu*](https://ontimetech.valeonetworks.com/about/) - [Client Testimonials](https://ontimetech.valeonetworks.com/testimonials/) - Example Link - Example Link - Example Link [*Facebook*](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#0) [*Instagram*](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#0) [*LinkedIn*](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#0) [*Twitter*](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#0) [*Youtube*](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#0) [*Medium*](https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day#0) 3 min read # Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/lance-stone) : Jun 15, 2021, 12:48:00 PM [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) ## Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day The Fancy Product Designer plugin — commonly used to configure visual products on WordPress, Shopify, and WooCommerce — has been compromised. Cybercriminals are actively looking for sites that use this plugin so as to exploit a recently-discovered vulnerability. ![Wordpress Security](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-689019766.jpg) ### What Is a Zero-Day Exploit? The term zero-day exploit, or just “zero-day” or “0-day”, refers to a type of vulnerability in computer software that the software vendor is aware of but that doesn’t yet have a patch or fix. During the space of time between when the exploit becomes known and when there is a patch or fix for it, the flaw makes the affected software extremely vulnerable to sinister activity. Naturally, zero-day vulnerabilities are never intended. They are usually found where the software company least expected to find a problem. At the same time, it is up to the software company to alert affected users and to find a patch for the flaw as soon as possible. Keeping the public and/or private software users in the loop is the best thing a software company can do to help stave off complications such as leaked or corrupted data or other compromised resources. ### What Is Fancy Product Designer? Fancy Product Designer is a plugin. In other words, it’s a type of software that complements an already-existing software program with a unique feature. In the case of Fancy Product Designer, the website explains that the plugin enables “you and your customers to design and customize any kind of product. Limited only by your imagination it gives you absolute freedom in deciding which products and which parts of the product can be customized.” As of early June, Fancy Product Designer had been installed on over 17,000 websites worldwide. These sites include WordPress sites, Shopify sites, and WooCommerce sites. ### What Are Hackers Doing With the Exploit? The bug in the Fancy Product Designer has made it possible for hackers to take advantage of Fancy Product Designer websites by deploying executable PHP files. This, in turn, allows them to entirely take over a website in any way they please. As the majority of websites being exploited are selling something online — either a good or a service or both — most hackers will use this newfound power to obtain order information. The affected e-commerce sites will, of course, possess information such as personal names and addresses, credit card information, and in some cases, social security numbers and other personal data. Zero-day exploits should be announced to the affected parties as soon as possible so that actions can be taken on the company level to deter hackers and possibly disable the vulnerable plugin entirely. Security preventions vary from company to company, so some affected businesses will already have security measures in place. However, others will not. As for the Fancy Product Designer zero-day, the product designers announced that active exploitation had been going on since January 30th, 2021. A new, patched version of the plugin has been available since June 2nd, 2021, but it must be manually downloaded. ### How Can I Avoid Running Into a Zero-Day Exploit That Affects My Company? If you are a business owner or manager, chances are, you use at least one type of software to operate your company. Unfortunately, this means you’re at risk of being exploited by zero-day vulnerabilities. These vulnerabilities crop up from time to time and are becoming relatively normal. As software and technology, in general, becomes an increasingly large part of daily life and business affairs, and as threat actors disappointingly become more adept at their craft, zero-day vulnerabilities will continue to be a problem. The best way to combat these vulnerabilities is to start with prevention. Choose to work only with software vendors who prioritize [cybersecurity](https://www.ontimetech.com/blog/cybersecurity-services/). When software is as airtight as possible, zero-days are far less likely to be a problem. Still, they do happen. To handle them well when they occur, choose your own top team of managed service providers. Again, you want professionals who prioritize cybersecurity and those who stay abreast of zero-days that may affect your company. Cutting off connections with infected software right away can prevent major problems down the line. If you don’t currently have a reliable managed service provider you’re working with, start speaking with companies in your area today. The sooner you ensure your [business’s cybersecurity](https://www.generationix.com/cybersecurity-risk-assessment/), the sooner you can rest easy when it comes to zero-day vulnerabilities. - [Tweet](https://twitter.com/share) #### ![BusinessOwnerGuidetoM&A-1](https://ontimetech.valeonetworks.com/hs-fs/hubfs/BusinessOwnerGuidetoM%26A-1.png?width=303&height=209&name=BusinessOwnerGuidetoM%26A-1.png) #### Download our eBook*THE ULTIMATE ROADMAP TO CMMC COMPLIANCE* by filling out the form below! #### [Searching For A San Francisco Computer Repair Company?](https://ontimetech.valeonetworks.com/blog/san-francisco-computer-repair-company) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : Dec 24, 2018, 11:16:03 AM We've all been there. You have a big client deadline and all of a sudden the printer or computer or software program that you depended on to get the... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/san-francisco-computer-repair-company) [![What CEOs Need to Know About Cybersecurity in 2019](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-937239290.jpg)](https://ontimetech.valeonetworks.com/blog/what-ceos-need-to-know-about-cybersecurity-in-2019) #### [What CEOs Need to Know About Cybersecurity in 2019](https://ontimetech.valeonetworks.com/blog/what-ceos-need-to-know-about-cybersecurity-in-2019) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/lance-stone) : May 31, 2019, 7:01:00 AM Understanding the threat landscape is a crucial part of a CEOs job as you attempt to protect your organization now and in the future. The... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/what-ceos-need-to-know-about-cybersecurity-in-2019) [![Security From The Cloud—The Prayers of Small & Medium Businesses Around The World Have Been Answered.](https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/466086473-1.jpg)](https://ontimetech.valeonetworks.com/blog/security-from-the-cloud-the-prayers-of-small-medium-businesses-around-the-world-have-been-answered) #### [Security From The Cloud—The Prayers of Small & Medium Businesses Around The World Have Been Answered.](https://ontimetech.valeonetworks.com/blog/security-from-the-cloud-the-prayers-of-small-medium-businesses-around-the-world-have-been-answered) [Lance Stone](https://ontimetech.valeonetworks.com/blog/author/ulisticadmin) : May 12, 2014, 2:34:40 AM Cloud-based security is helping small- and medium-sized organizations (SMBs) better manage their security needs, and meet regulatory requirements... [Managed IT Services](https://ontimetech.valeonetworks.com/blog/tag/managed-it-services) [Read More](https://ontimetech.valeonetworks.com/blog/security-from-the-cloud-the-prayers-of-small-medium-businesses-around-the-world-have-been-answered) ![OTT White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/OTT%20Logo/OTT%20White%20logo.png?width=524&height=140&name=OTT%20White%20logo.png)   ##### About About On Time Tech is an IT Support and Computer Services company serving California. We provide services to the areas in and around We know businesses like yours need technology support in order to run highly-effective organizations. Leverage pro-growth technology services for your company now. ##### Explore On Time Time Explore On Time Time - [Our Services](https://ontimetech.valeonetworks.com/our-services/) - [Industries](https://ontimetech.valeonetworks.com/industries/) - [Resources](https://ontimetech.valeonetworks.com/resources/) - [About](https://ontimetech.valeonetworks.com/about/) - [Contact](https://ontimetech.valeonetworks.com/contact/) ##### Contact Contact **San Francisco:** 1717 Fifth Ave San Rafael, CA 94901 [415-294-5250](tel:4152945250) Business Hours: M-F: 8AM-9PM - [Privacy Policy](https://ontimetech.valeonetworks.com/privacy-policy/) © 2026 On Time Tech [*Facebook*](https://www.facebook.com/ontimetechsf/)[*Twitter*](https://twitter.com/on_time_tech?lang=en)[*LinkedIn*](https://www.linkedin.com/company/ontimetech/)[*YouTube*](https://www.youtube.com/channel/UCubqs9PU_WWF-RFhfK9xNpw) [![Alura White logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/VN%20-%20Division%20Logos/Alura%20White%20logo.png?width=295&height=115&name=Alura%20White%20logo.png)](https://alura.valeonetworks.com/) [![Next.I.T._White-Logo](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Next.I.T._White-Logo.png?width=328&height=136&name=Next.I.T._White-Logo.png)](https://next-it.net/) [![White-OTT-Logo-1-768x253](https://ontimetech.valeonetworks.com/hs-fs/hubfs/White-OTT-Logo-1-768x253.png?width=313&height=103&name=White-OTT-Logo-1-768x253.png)](https://www.ontimetech.com/) [![Valeo-Logo-White (1)](https://ontimetech.valeonetworks.com/hs-fs/hubfs/Valeo-Logo-White%20(1).png?width=288&height=123&name=Valeo-Logo-White%20(1).png)](https://valeonetworks.com/) *Return to Top* ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Lance Stone", "url" : "https://ontimetech.valeonetworks.com/blog/author/lance-stone" }, "dateModified" : "2024-01-10T16:32:44.913Z", "datePublished" : "2021-06-15T16:48:00.000Z", "headline" : "Cyber Criminals Are Actively Exploiting a WordPress Plugin Zero-Day", "image" : [ "https://ontimetech.valeonetworks.com/hubfs/Blog%20Images/Imported_Blog_Media/GettyImages-689019766.jpg" ], "mainEntityOfPage" : { "@id" : "https://ontimetech.valeonetworks.com/blog/cyber-criminals-are-actively-exploiting-a-wordpress-plugin-zero-day", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://ontimetech.valeonetworks.com/hubfs/OTT%20-%20Color%20Logo.png" }, "name" : "Valeo Networks" } } ```