Pencidesign vulnerabilities
34 CVEs and advisories name Pencidesign as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-93902Soledad <= 8.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fields
- CVE-2026-27054WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2026-27069WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-27059WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-27058WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-27057WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-27055WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability
- CVE-2026-24601WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-24600WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability
- CVE-2026-24354WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-64223WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability
- CVE-2025-64188WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability
- CVE-2025-68066WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability
- CVE-2025-67572WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability
- CVE-2025-49909WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-59583WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-59584WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-59585WordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-59586WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-59587WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-59588WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability
- CVE-2025-59589WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-8143Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
- CVE-2025-8105Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution
- CVE-2025-8142Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
- CVE-2024-11289Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
- CVE-2024-3551Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion
- CVE-2024-31369WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2024-31368WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability
- CVE-2024-31367WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability