Skip to content
Undsgn Uncode vulnerabilities
-
uncode
WordPress Uncode theme <= 2.12.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-81291
7.1 High
-
undsgn uncode
WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2025-48107
7.1 High
-
undsgn uncode core
Uncode Core <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
CVE-2025-6944
6.4 Medium
-
undsgn uncode core
Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias
CVE-2024-13689
6.3 Medium
-
undsgn uncode
Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia
CVE-2024-13691
6.5 Medium
-
undsgn uncode
Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description
CVE-2024-13667
5.4 Medium
-
undsgn uncode
Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed
CVE-2024-13681
7.5 High
-
undsgn uncode core
WordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability
CVE-2023-51500
7.7 High
-
undsgn uncode, uncode core +1 more
WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability
CVE-2023-51515
8.8 High
-
undsgn uncode, uncode - creative & woocommerce wordpress theme +1 more
WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-51501
7.1 High