Andondesign Udesign vulnerabilities

• andondesign udesign core WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability CVE-2026-42416 8.5 HighOctober 6, 2026
• andondesign udesign WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-28130 7.1 HighMarch 5, 2026
• andondesign udesign core WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability CVE-2025-63062 7.5 HighDecember 9, 2025
• andondesign udesign core WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62051 6.5 MediumNovember 6, 2025
• andondesign udesign core WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability CVE-2025-53236 6.3 MediumOctober 22, 2025
• andondesign udesign core WordPress UDesign Core plugin <= 4.14.0 - Cross Site Scripting (XSS) vulnerability CVE-2025-53234 7.1 HighOctober 22, 2025
• andondesign udesign WordPress uDesign theme <= 4.11.2 - Broken Access Control vulnerability CVE-2025-24757 5.3 MediumJuly 4, 2025
• andondesign udesign WordPress UDesign theme <= 4.7.3 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-4077 7.1 HighApril 25, 2024