Login Request a demo
SO
Product
Soledad
by pencidesign · last CVE Feb 19, 2026
16
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities16In the news0Timeline
Severity mix
Critical 2High 6Medium 8Low 0
Severity
All severities16Critical2High6Medium8Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Soledad to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-27069
6.5
0%
Feb 19
WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 8.7.2
CVE-2025-59589
6.5
0%
Sep 22
WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability
Affected: through 8.6.8
CVE-2024-31368
6.5
0%
Apr 9
Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2
Affected: before 8.4.6
CVE-2025-8143
6.4
0%
Aug 16
Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Affected: through 8.6.7
CVE-2023-49827
6.1
0%
Dec 14
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress…
Affected: before 8.4.2
CVE-2022-3209
6.1
1%
Oct 10
Soledad < 8.2.5 - Reflected Cross-site Scripting
Affected: before 8.2.5
CVE-2024-31369
5.4
0%
Apr 9
Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2
Affected: before 8.4.6
CVE-2022-41788
5.4
0%
Nov 18
Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress
Affected: before 8.2.6
Showing 8