TI-2026-68004 CVE-2026-42416 · GHSA-9hcr-cwhj-3rp5
SQL injection in WordPress UDesign Core plugin
Priority LOW 36
Subscriber SQL Injection in UDesign Core <= 4.15.0 versions.
Vulnerabilities
8 records
TI-2026-22471 CVE-2026-28130 · GHSA-r354-wxvj-6974
WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 30
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign u-design allows Reflected XSS.This issue affects UDesign: from n/a through <= 4.14.0.
TI-2025-39210 CVE-2025-63062 · GHSA-p4xm-rh4q-xxwr
WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability
Priority LOW 36
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in AndonDesign UDesign Core u-design-core allows PHP Local File Inclusion.This issue affects UDesign C…
TI-2025-38374 CVE-2025-62051 · GHSA-w747-9m2v-9c7f
WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through <= 4.14.1.
TI-2025-33203 CVE-2025-53236 · GHSA-p7hh-p4vh-hgg8
WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability
Priority LOW 28
Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through <= 4.14.0.
TI-2025-33201 CVE-2025-53234 · GHSA-v596-w3q8-4mcm
WordPress UDesign Core plugin <= 4.14.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core allows Reflected XSS.This issue affects UDesign Core: from n/a through <= 4.14.…
TI-2025-18474 CVE-2025-24757 · GHSA-rqm6-3pvf-cx3r
WordPress uDesign theme <= 4.11.2 - Broken Access Control vulnerability
Priority LOW 24
Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through <= 4.11.2.
TI-2024-03797 CVE-2024-4077 · GHSA-h8mw-8q3w-gx9j
WordPress UDesign theme <= 4.7.3 - Reflected Cross Site Scripting (XSS) vulnerability
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign allows Reflected XSS.This issue affects UDesign: from n/a through 4.7.3.