PenciDesign records

9 published records for vendor pencidesign.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 33.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-49826No exploit	WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injectionpencidesign · soledad · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Dec 21, 2023
32Monitor	CVE-2024-11289No exploit	Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusionpencidesign · soledad · CWE-98 Pre-auth	High8.1	—	0.6%	Dec 6, 2024
32Monitor	CVE-2023-49825No exploit	WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injectionpencidesign · soledad · CWE-89 SQL injection	High8.1	—	0.5%	Dec 20, 2023
28Monitor	CVE-2024-31367No exploit	WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerabilitypencidesign · soledad · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Apr 9, 2024
26Monitor	CVE-2024-31368No exploit	WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerabilitypencidesign · soledad · CWE-862 Pre-auth Broken access control (IDOR)	Medium6.5	—	0.4%	Apr 9, 2024
24Monitor	CVE-2022-3209No exploit	Soledad < 8.2.5 - Reflected Cross-site Scriptingpencidesign · soledad · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Oct 10, 2022
24Monitor	CVE-2023-49827No exploit	WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)pencidesign · soledad · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Dec 14, 2023
21Monitor	CVE-2022-41788No exploit	WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerabilitypencidesign · soledad · CWE-79 XSS	Medium5.4	—	0.4%	Nov 18, 2022
21Monitor	CVE-2024-31369No exploit	WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerabilitypencidesign · soledad · CWE-352 Pre-auth CSRF	Medium5.4	—	0.2%	Apr 9, 2024

CVE-2023-49826
39Monitor
WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
pencidesign · soledadDec 21, 2023
CVE-2024-11289
32Monitor
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
pencidesign · soledadDec 6, 2024
CVE-2023-49825
32Monitor
WordPress Soledad Theme <= 8.4.1 is vulnerable to SQL Injection
HighCVSS 8.1No exploitEPSS 0%
- SQL injection
pencidesign · soledadDec 20, 2023
CVE-2024-31367
28Monitor
WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
pencidesign · soledadApr 9, 2024
CVE-2024-31368
26Monitor
WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
pencidesign · soledadApr 9, 2024
CVE-2022-3209
24Monitor
Soledad < 8.2.5 - Reflected Cross-site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
pencidesign · soledadOct 10, 2022
CVE-2023-49827
24Monitor
WordPress Soledad Theme <= 8.4.1 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
pencidesign · soledadDec 14, 2023
CVE-2022-41788
21Monitor
WordPress Soledad premium theme <= 8.2.5 - Auth. Cross-Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
pencidesign · soledadNov 18, 2022
CVE-2024-31369
21Monitor
WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
- CSRF
pencidesign · soledadApr 9, 2024