CVEs we hold for Pencidesign

Records whose assigning authority named Pencidesign as the affected vendor. Newest identifiers first, capped at 200.

CVE-2026-27069WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Soledad

CVE-2026-27059WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Recipe

CVE-2026-27058WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Podcast

CVE-2026-27057WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Filter Everything

CVE-2026-27055WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerabilityPenciDesign Penci AI SmartContent Creator

CVE-2026-27054WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Soledad Data Migrator

CVE-2026-24601WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Pay Writer

CVE-2026-24600WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Review

CVE-2026-24354WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Shortcodes & Performance

CVE-2025-8143Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'pencidesign Soledad

CVE-2025-8142Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'pencidesign Soledad

CVE-2025-8105Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Executionpencidesign Soledad

CVE-2025-68066WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerabilityPenciDesign Soledad

CVE-2025-67572WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerabilityPenciDesign PenNews

CVE-2025-64223WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerabilityPenciDesign PenNews

CVE-2025-64188WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerabilityPenciDesign Soledad

CVE-2025-59589WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) VulnerabilityPenciDesign Soledad

CVE-2025-59588WordPress Soledad Theme <= 8.6.8 - Local File Inclusion VulnerabilityPenciDesign Soledad

CVE-2025-59587WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) VulnerabilityPenciDesign Penci Shortcodes & Performance

CVE-2025-59586WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) VulnerabilityPenciDesign Penci Portfolio

CVE-2025-59585WordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) VulnerabilityPenciDesign Penci Recipe

CVE-2025-59584WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) VulnerabilityPenciDesign Penci Podcast

CVE-2025-59583WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) VulnerabilityPenciDesign Penci Filter Everything

CVE-2025-49909WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerabilityPenciDesign Penci Bookmark & Follow

CVE-2024-3551Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusionpencidesign Penci Soledad Data Migrator

CVE-2024-31369WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerabilityPenciDesign Soledad

CVE-2024-31368WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerabilityPenciDesign Soledad

CVE-2024-31367WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerabilityPenciDesign Soledad

CVE-2024-11289Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusionpencidesign Soledad

CVE-2023-49827WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)PenciDesign Soledad – Multipurpose, Newspaper, Blog &…

CVE-2023-49826WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object InjectionPenciDesign Soledad – Multipurpose, Newspaper, Blog &…

CVE-2023-49825WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL InjectionPenciDesign Soledad – Multipurpose, Newspaper, Blog &…

CVE-2022-41788WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerabilityPenciDesign Soledad (WordPress theme)

33 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.