AndonDesign

Products

ProductCVEsExploitedLatest
UDesign Core5–Oct 6, 2026
UDesign3–Mar 5, 2026

Exploited and recent CVEs

  • CVE-2026-42416 High 8.5 WordPress UDesign Core plugin <= 4.15.0 - SQL Injection vulnerability 0.3%
  • CVE-2026-28130 High 7.1 WordPress UDesign theme <= 4.14.0 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-63062 High 7.5 WordPress UDesign Core plugin <= 4.14.0 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-62051 Medium 6.5 WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-53236 Medium 6.3 WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability 0.2%
  • CVE-2025-53234 High 7.1 WordPress UDesign Core plugin <= 4.14.0 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-24757 Medium 5.3 WordPress uDesign theme <= 4.11.2 - Broken Access Control vulnerability 0.3%
  • CVE-2024-4077 High 7.1 WordPress UDesign theme <= 4.7.3 - Reflected Cross Site Scripting (XSS) vulnerability 0.4%