What’s Vulnerable › Products

undsgn Uncode vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your undsgn Uncode version is affected

Latest undsgn Uncode vulnerabilities

• CVE-2025-48107 — WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2024-13691 — Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia (CVSS 6.5)
• CVE-2024-13681 — Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed (CVSS 7.5)
• CVE-2024-13667 — Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description (CVSS 5.4)
• CVE-2023-51515 — WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability (CVSS 8.8)
• CVE-2023-51501 — WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)