Soledad
PenciDesign · 12 CVEs
WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability
Feb 19, 2026
WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability
Dec 18, 2025
WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability
Dec 16, 2025
WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability
Sep 22, 2025
WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability
Sep 22, 2025
Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Aug 16, 2025
Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution
Aug 16, 2025
Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Aug 16, 2025
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
Dec 6, 2024
WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability
Apr 9, 2024
WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability
Apr 9, 2024
WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability
Apr 9, 2024
WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection
Dec 21, 2023
WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection
Dec 20, 2023
WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)
Dec 14, 2023
WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability
Nov 18, 2022
Soledad < 8.2.5 - Reflected Cross-site Scripting
Oct 10, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-27069 | WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.23% | Feb 19, 2026 |
| CVE-2025-64188 | WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability | CRITICAL | 0.43% | Dec 18, 2025 |
| CVE-2025-68066 | WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability | HIGH | 0.39% | Dec 16, 2025 |
| CVE-2025-59588 | WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability | HIGH | 0.41% | Sep 22, 2025 |
| CVE-2025-59589 | WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability | MEDIUM | 0.17% | Sep 22, 2025 |
| CVE-2025-8143 | Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' | MEDIUM | 0.20% | Aug 16, 2025 |
| CVE-2025-8105 | Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution | HIGH | 0.34% | Aug 16, 2025 |
| CVE-2025-8142 | Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' | HIGH | 0.51% | Aug 16, 2025 |
| CVE-2024-11289 | Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion | HIGH | 0.69% | Dec 6, 2024 |
| CVE-2024-31369 | WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability | MEDIUM | 0.22% | Apr 9, 2024 |
| CVE-2024-31368 | WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability | MEDIUM | 0.44% | Apr 9, 2024 |
| CVE-2024-31367 | WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability | HIGH | 0.43% | Apr 9, 2024 |
| CVE-2023-49826 | WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection | CRITICAL | 0.56% | Dec 21, 2023 |
| CVE-2023-49825 | WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection | HIGH | 0.53% | Dec 20, 2023 |
| CVE-2023-49827 | WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS) | HIGH | 0.39% | Dec 14, 2023 |
| CVE-2022-41788 | WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability | MEDIUM | 0.42% | Nov 18, 2022 |
| CVE-2022-3209 | Soledad < 8.2.5 - Reflected Cross-site Scripting | MEDIUM | 0.60% | Oct 10, 2022 |
Showing 1 to 12 of 12 CVEs