What’s Vulnerable › Products

PenciDesign Soledad vulnerabilities

17 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.

Check whether your PenciDesign Soledad version is affected

Latest PenciDesign Soledad vulnerabilities

CVE-2026-27069 — WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
CVE-2025-64188 — WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability (CVSS 9.8)
CVE-2025-68066 — WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability (CVSS 7.5)
CVE-2025-59589 — WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability (CVSS 6.5)
CVE-2025-59588 — WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability (CVSS 7.5)
CVE-2025-8143 — Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' (CVSS 6.4)
CVE-2025-8142 — Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' (CVSS 8.8)
CVE-2025-8105 — Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution (CVSS 7.3)
CVE-2024-11289 — Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion (CVSS 8.1)
CVE-2024-31369 — WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability (CVSS 5.4)
CVE-2024-31368 — WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability (CVSS 6.5)
CVE-2024-31367 — WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability (CVSS 7.1)
CVE-2023-49826 — WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection (CVSS 9.8)
CVE-2023-49825 — WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection (CVSS 8.1)
CVE-2023-49827 — WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
CVE-2022-41788 — WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability (CVSS 5.4)
CVE-2022-3209 — Soledad < 8.2.5 - Reflected Cross-site Scripting (CVSS 6.1)