What’s Vulnerable › Products

Undsgn Uncode Core vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your Undsgn Uncode Core version is affected

Latest Undsgn Uncode Core vulnerabilities

• CVE-2025-6944 — Uncode Core <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes (CVSS 6.4)
• CVE-2024-13689 — Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias (CVSS 6.3)
• CVE-2023-51500 — WordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability (CVSS 7.7)