PE
Vendor
PenciDesign
6 products with CVEs on record
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-27054
PS
Penci Soledad Data Migrator
PenciDesign
7.1
0%
Mar 25WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2026-27069
SO
Soledad
PenciDesign
6.5
0%
Feb 19WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27059
PR
Penci Recipe
PenciDesign
6.5
0%
Feb 19WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27058
PP
Penci Podcast
PenciDesign
6.5
0%
Feb 19WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27057
PF
Penci Filter Everything
PenciDesign
6.5
0%
Feb 19WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability
CVE-2026-27055
PA
Penci AI SmartContent Creator
PenciDesign
4.3
0%
Feb 19WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability
CVE-2024-31369
SO
Soledad
Pencidesign
5.4
0%
Apr 9Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2
CVE-2024-31368
SO
Soledad
Pencidesign
6.5
0%
Apr 9Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2
CVE-2024-31367
SO
Soledad
Pencidesign
7.1
0%
Apr 9Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2
CVE-2023-49826
SO
Soledad
Pencidesign
9.8
1%
Dec 21Deserialization of Untrusted Data vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipurpose,…
CVE-2023-49825
SO
Soledad
Pencidesign
8.1
1%
Dec 20Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress…
CVE-2023-49827
SO
Soledad
Pencidesign
6.1
0%
Dec 14Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress…
CVE-2022-41788
SO
Soledad
Pencidesign
5.4
0%
Nov 18Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress
CVE-2022-3209
SO
Soledad
Pencidesign
6.1
1%
Oct 10Soledad < 8.2.5 - Reflected Cross-site Scripting