Undsgn Uncode Core vulnerabilities

4 published CVEs name Undsgn Uncode Core among the affected products.

Critical 0High 2Medium 2Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2025-6944
Uncode Core <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes
undsgn · Uncode Core
Medium6.4
CVE-2024-13689
Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias
undsgn · Uncode Core
Medium6.3
CVE-2023-51500
WordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability
Undsgn · Uncode Core
High7.7
CVE-2023-51515
WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability
Undsgn · Uncode Core
High8.8