PenciDesign Soledad

• CVE-2026-93902 Medium 6.4 Soledad <= 8.7.7 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Social Profile Fields –
• CVE-2026-27069 Medium 6.5 WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-64188 Critical 9.8 WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability 0.4%
• CVE-2025-68066 High 7.5 WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability 0.4%
• CVE-2025-59588 High 7.5 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability 0.5%
• CVE-2025-59589 Medium 6.5 WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability 0.2%
• CVE-2025-8143 Medium 6.4 Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' 0.2%
• CVE-2025-8105 High 7.3 Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution 0.4%
• CVE-2025-8142 High 8.8 Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' 0.6%
• CVE-2024-11289 High 8.1 Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion 0.7%
• CVE-2024-31369 Medium 5.4 WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
• CVE-2024-31368 Medium 6.5 WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability 0.4%
• CVE-2024-31367 High 7.1 WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability 0.4%