Vulnerabilities > Pencidesign
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-21 | CVE-2023-49826 | Deserialization of Untrusted Data vulnerability in Pencidesign Soledad Deserialization of Untrusted Data vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from n/a through 8.4.1. | 9.8 |
| 2023-12-20 | CVE-2023-49825 | SQL Injection vulnerability in Pencidesign Soledad Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from n/a through 8.4.1. | 8.1 |
| 2023-12-14 | CVE-2023-49827 | Cross-site Scripting vulnerability in Pencidesign Soledad Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme allows Reflected XSS.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: from n/a through 8.4.1. | 6.1 |
| 2022-11-18 | CVE-2022-41788 | Cross-site Scripting vulnerability in Pencidesign Soledad Auth. | 5.4 |
| 2022-10-10 | CVE-2022-3209 | Cross-site Scripting vulnerability in Pencidesign Soledad The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability. | 6.1 |