undsgn vulnerabilities

CVEs per yearBy the year they were published

1. 20231
2. 20242
3. 20256

Newest CVEs

• CVE-2025-48107

  WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability

  undsgn · Uncode

  High7.1
• CVE-2025-6944

  Uncode Core <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes

  undsgn · Uncode Core

  Medium6.4
• CVE-2024-13689

  Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias

  undsgn · Uncode Core

  Medium6.3
• CVE-2024-13691

  Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia

  undsgn · Uncode

  Medium6.5
• CVE-2024-13667

  Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description

  undsgn · Uncode

  Medium5.4
• CVE-2024-13681

  Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed

  undsgn · Uncode

  High7.5
• CVE-2023-51500

  WordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability

  Undsgn · Uncode Core

  High7.7
• CVE-2023-51515

  WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability

  Undsgn · Uncode Core

  High8.8
• CVE-2023-51501

  WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)

  Undsgn · Uncode - Creative & WooCommerce WordPress Theme

  High7.1