Log in Start free

PenciDesign

Products

ProductCVEsExploitedLatest
Soledad12–Feb 19, 2026
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme3–Dec 21, 2023
PenNews2–Dec 18, 2025
Penci Filter Everything2–Feb 19, 2026
Penci Recipe2–Feb 19, 2026
Penci Shortcodes & Performance2–Jan 22, 2026
Penci Podcast2–Feb 19, 2026
Penci Soledad Data Migrator2–Mar 25, 2026
Soledad (WordPress theme)1–Nov 18, 2022
Penci Bookmark & Follow1–Nov 6, 2025
Penci Pay Writer1–Jan 23, 2026
Penci Portfolio1–Sep 22, 2025
Penci Review1–Jan 23, 2026
Penci AI SmartContent Creator1–Feb 19, 2026

Exploited and recent CVEs

  • CVE-2026-27054 High 7.1 WordPress Penci Soledad Data Migrator plugin <= 1.3.1 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27069 Medium 6.5 WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27059 Medium 6.5 WordPress Penci Recipe plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27058 Medium 6.5 WordPress Penci Podcast plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27057 Medium 6.5 WordPress Penci Filter Everything plugin <= 1.7 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-27055 Medium 4.3 WordPress Penci AI SmartContent Creator plugin <= 2.0 - Broken Access Control vulnerability 0.2%
  • CVE-2026-24601 Medium 6.5 WordPress Penci Pay Writer plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24600 Medium 6.5 WordPress Penci Review plugin <= 3.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-24354 Medium 6.5 WordPress Penci Shortcodes & Performance plugin <= 6.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-64223 High 8.1 WordPress PenNews theme < 6.7.3 - Local File Inclusion vulnerability 0.5%
  • CVE-2025-64188 Critical 9.8 WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability 0.4%
  • CVE-2025-68066 High 7.5 WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability 0.4%
  • CVE-2025-67572 Medium 5.3 WordPress PenNews theme < 6.7.4 - Broken Access Control vulnerability 0.3%
  • CVE-2025-49909 High 7.1 WordPress Penci Bookmark & Follow plugin < 2.4 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-59583 Medium 6.5 WordPress Penci Filter Everything Plugin < 1.7 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-59584 Medium 6.5 WordPress Penci Podcast Plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-59585 Medium 6.5 WordPress Penci Recipe Plugin <= 4.0 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-59586 Medium 6.5 WordPress Penci Portfolio Plugin <= 3.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-59587 Medium 6.5 WordPress Penci Shortcodes & Performance Plugin < 6.1 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-59588 High 7.5 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability 0.5%
  • CVE-2025-59589 Medium 6.5 WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-8143 Medium 6.4 Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' 0.2%
  • CVE-2025-8105 High 7.3 Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution 0.4%
  • CVE-2025-8142 High 8.8 Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' 0.6%
  • CVE-2024-11289 High 8.1 Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion 0.7%
  • CVE-2024-3551 Critical 9.8 Penci Soledad Data Migrator <= 1.3.0 - Unauthenticated Local File Inclusion 0.7%
  • CVE-2024-31369 Medium 5.4 WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
  • CVE-2024-31368 Medium 6.5 WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability 0.4%
  • CVE-2024-31367 High 7.1 WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability 0.4%
  • CVE-2023-49826 High 8.1 WordPress Soledad Theme <= 8.4.1 is vulnerable to PHP Object Injection 0.6%