Vulnerabilities

TI-2024-20741 CVE-2024-31369 · GHSA-prqm-j32h-gr46

WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00221 Published 2024-04-09 No fix listed CWE-352

TI-2024-20740 CVE-2024-31368 · GHSA-w27w-5f55-hf65

WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00437 Published 2024-04-09 No fix listed CWE-862

TI-2024-20739 CVE-2024-31367 · GHSA-77wg-f3wm-v858

WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability

LOW 32

Missing Authorization vulnerability in PenciDesign Soledad.This issue affects Soledad: from n/a through 8.4.2.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00428 Published 2024-04-09 No fix listed CWE-862

TI-2023-27230 CVE-2023-49826 · GHSA-c82j-mm7v-vfp8

WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection

MEDIUM 44

Deserialization of Untrusted Data vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Them…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00562 Published 2023-12-21 No fix listed CWE-502

TI-2023-27229 CVE-2023-49825 · GHSA-4m4j-w3qr-4gcc

WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme.This issue affects Soledad – Multipu…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00528 Published 2023-12-20 No fix listed CWE-89

TI-2023-27231 CVE-2023-49827 · GHSA-q62r-62c5-h547

WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme allows Reflected XSS.This issue affe…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2023-12-14 No fix listed CWE-79

TI-2022-20163 CVE-2022-41788 · GHSA-pfv8-5qjr-758g

WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability

LOW 25

Auth. (subscriber+) Cross-Site Scripting (XSS) vulnerability in Soledad premium theme <= 8.2.5 on WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00439 Published 2022-11-18 No fix listed CWE-79

TI-2022-02964 CVE-2022-3209 · GHSA-c975-8p92-pprh

Soledad < 8.2.5 - Reflected Cross-site Scripting

LOW 28

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00618 Published 2022-10-10 Fixed in 8.2.5 CWE-79

Vulnerabilities

Filters