PenciDesign vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20233
3. 20245
4. 202515
5. 20269

Newest CVEs

• CVE-2026-27054

  WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Soledad Data Migrator

  High7.1
• CVE-2026-27069

  WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Soledad

  Medium6.5
• CVE-2026-27059

  WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Recipe

  Medium6.5
• CVE-2026-27058

  WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Podcast

  Medium6.5
• CVE-2026-27057

  WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Filter Everything

  Medium6.5
• CVE-2026-27055

  WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability

  PenciDesign · Penci AI SmartContent Creator

  Medium4.3
• CVE-2026-24601

  WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Pay Writer

  Medium6.5
• CVE-2026-24600

  WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Review

  Medium6.5
• CVE-2026-24354

  WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerability

  PenciDesign · Penci Shortcodes & Performance

  Medium6.5
• CVE-2025-64223

  WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability

  PenciDesign · PenNews

  High8.1