Pencidesign Soledad vulnerabilities

• pencidesign soledad Soledad <= 8.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fields CVE-2026-93902 6.4 MediumNovember 7, 2026
• pencidesign soledad WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability CVE-2022-42479 5.4 MediumJune 11, 2026
• pencidesign penci soledad data migrator WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2026-27054 7.1 HighMarch 25, 2026
• pencidesign soledad WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-27069 6.5 MediumFebruary 19, 2026
• pencidesign soledad WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability CVE-2025-64188 9.8 CriticalDecember 18, 2025
• pencidesign soledad WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability CVE-2025-68066 7.5 HighDecember 16, 2025
• pencidesign soledad WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability CVE-2025-59588 7.5 HighSeptember 22, 2025
• pencidesign soledad WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability CVE-2025-59589 6.5 MediumSeptember 22, 2025
• pencidesign soledad Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' CVE-2025-8143 6.4 MediumAugust 16, 2025
• pencidesign soledad Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution CVE-2025-8105 7.3 HighAugust 16, 2025
• pencidesign soledad Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' CVE-2025-8142 8.8 HighAugust 16, 2025
• pencidesign soledad Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion CVE-2024-11289 8.1 HighDecember 6, 2024
• pencidesign penci soledad data migrator Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion CVE-2024-3551 9.8 CriticalMay 17, 2024
• pencidesign soledad WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability CVE-2024-31369 5.4 MediumApril 9, 2024
• pencidesign soledad WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability CVE-2024-31368 6.5 MediumApril 9, 2024
• pencidesign soledad WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability CVE-2024-31367 7.1 HighApril 9, 2024
• pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 more WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection CVE-2023-49826 8.1 HighDecember 21, 2023
• pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 more WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection CVE-2023-49825 8.5 HighDecember 20, 2023
• pencidesign soledad, soledad – multipurpose, newspaper, blog & woocommerce wordpress theme +1 more WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49827 7.1 HighDecember 14, 2023
• pencidesign soledad, soledad (wordpress theme) +1 more WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability CVE-2022-41788 5.4 MediumNovember 18, 2022
• pencidesign soledad Soledad < 8.2.5 - Reflected Cross-site Scripting CVE-2022-3209 6.1 MediumOctober 10, 2022