UUndsgn

Products

Exploited and recent CVEs

• CVE-2025-48107 High 7.1 WordPress Uncode theme < 2.9.4.4 - Reflected Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-6944 Medium 6.4 Uncode Core <= 2.9.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes 0.2%
• CVE-2024-13689 Medium 6.3 Uncode Core <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary Shortcode Execution in uncode_get_medias 0.5%
• CVE-2024-13691 Medium 6.5 Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia 0.4%
• CVE-2024-13667 Medium 5.4 Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description 0.2%
• CVE-2024-13681 High 7.5 Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed 0.6%
• CVE-2023-51500 High 7.7 WordPress Uncode Core plugin <= 2.8.8 - Arbitrary File Deletion vulnerability 0.5%
• CVE-2023-51515 High 8.8 WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability 0.5%
• CVE-2023-51501 High 7.1 WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS) 0.4%