Pencidesign vulnerabilities

Products

• Soledad 19
• Soledad – Multipurpose, Newspaper, Blog & Woocommerce Wordpress Theme 3
• Penci Filter Everything 2
• Penci Podcast 2
• Penci Recipe 2
• Penci Shortcodes & Performance 2
• Penci Soledad Data Migrator 2
• Pennews 2

Newest

• pencidesign soledad Soledad <= 8.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fields CVE-2026-93902 6.4 MediumNovember 7, 2026
• pencidesign soledad WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability CVE-2022-42479 5.4 MediumJune 11, 2026
• pencidesign penci soledad data migrator WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27054 7.1 HighMarch 25, 2026
• pencidesign soledad WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-27069 6.5 MediumFebruary 19, 2026
• pencidesign penci recipe WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-27059 6.5 MediumFebruary 19, 2026
• pencidesign penci podcast WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-27058 6.5 MediumFebruary 19, 2026
• pencidesign penci filter everything WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability CVE-2026-27057 6.5 MediumFebruary 19, 2026
• pencidesign penci ai smartcontent creator WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability CVE-2026-27055 4.3 MediumFebruary 19, 2026
• pencidesign penci pay writer WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-24601 6.5 MediumJanuary 23, 2026
• pencidesign penci review WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-24600 6.5 MediumJanuary 23, 2026
• pencidesign penci shortcodes & performance WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-24354 6.5 MediumJanuary 22, 2026
• pencidesign pennews WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability CVE-2025-64223 8.1 HighDecember 18, 2025
• pencidesign soledad WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability CVE-2025-64188 9.8 CriticalDecember 18, 2025
• pencidesign soledad WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability CVE-2025-68066 7.5 HighDecember 16, 2025
• pencidesign pennews WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability CVE-2025-67572 5.3 MediumDecember 9, 2025
• pencidesign penci bookmark & follow WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerability CVE-2025-49909 7.1 HighNovember 6, 2025
• pencidesign penci filter everything WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59583 6.5 MediumSeptember 22, 2025
• pencidesign penci podcast WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59584 6.5 MediumSeptember 22, 2025
• pencidesign penci recipe WordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59585 6.5 MediumSeptember 22, 2025
• pencidesign penci shortcodes & performance WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59587 6.5 MediumSeptember 22, 2025
• pencidesign penci portfolio WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59586 6.5 MediumSeptember 22, 2025
• pencidesign soledad WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability CVE-2025-59588 7.5 HighSeptember 22, 2025
• pencidesign soledad WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59589 6.5 MediumSeptember 22, 2025
• pencidesign soledad Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' CVE-2025-8143 6.4 MediumAugust 16, 2025
• pencidesign soledad Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution CVE-2025-8105 7.3 HighAugust 16, 2025
• pencidesign soledad Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' CVE-2025-8142 8.8 HighAugust 16, 2025
• pencidesign soledad Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion CVE-2024-11289 8.1 HighDecember 6, 2024
• pencidesign penci soledad data migrator Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion CVE-2024-3551 9.8 CriticalMay 17, 2024
• pencidesign soledad WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31369 5.4 MediumApril 9, 2024
• pencidesign soledad WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability CVE-2024-31368 6.5 MediumApril 9, 2024
• pencidesign soledad WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability CVE-2024-31367 7.1 HighApril 9, 2024
• pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 more WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection CVE-2023-49826 8.1 HighDecember 21, 2023
• pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 more WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection CVE-2023-49825 8.5 HighDecember 20, 2023
• pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 more WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49827 7.1 HighDecember 14, 2023
• pencidesign soledad, soledad (wordpress theme) +1 more WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability CVE-2022-41788 5.4 MediumNovember 18, 2022
• pencidesign soledad Soledad < 8.2.5 - Reflected Cross-site Scripting CVE-2022-3209 6.1 MediumOctober 10, 2022