Browse CVEs

HIGH 7.1 CVE-2024-31367 Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. Soledad 8.4.6+ Fix from $1,9502024-04-09 MEDIUM 6.5 CVE-2024-31368 Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. Soledad 8.4.6+ Fix from $1,6002024-04-09 MEDIUM 5.4 CVE-2024-31369 Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2. Soledad 8.4.6+ Fix from $1,6002024-04-09 CRITICAL 9.8 CVE-2023-49826 Deserialization of Untrusted Data vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affec… Soledad 8.4.2+ Fix from $2,3002023-12-21 HIGH 8.1 CVE-2023-49825 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, … Soledad 8.4.2+ Fix from $1,9502023-12-20 MEDIUM 6.1 CVE-2023-49827 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, … Soledad 8.4.2+ Fix from $1,6002023-12-14 MEDIUM 5.4 CVE-2022-41788 Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress. Soledad 8.2.6+ Fix from $1,6002022-11-18 MEDIUM 6.1 CVE-2022-3209 The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, le… Soledad 8.2.5+ Fix from $1,6002022-10-10