Read the docs

undsgn

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

undsgn records in CISA KEV

No undsgn vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uncode 4 records MEDIUM

Records

4 records in Uncode · all components

TI-2023-28153 CVE-2023-51501 · GHSA-3p46-hrfw-c9xm

WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Undsgn Uncode - Creative & WooCommerce WordPress Theme allows Reflected XSS.This issue affects Uncode - Creative & Woo…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00351 Published 2023-12-28 No fix listed CWE-79
TI-2024-12706 CVE-2024-13667 · GHSA-h3q6-j7c5-cmp5

Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description

Priority LOW 24

The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00246 Published 2025-02-18 No fix listed CWE-79
Open these records in search →