WordPress Uncode Vulnerabilities

Wordpress Uncode vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

26 September 2025

Reflected XSS Vulnerability in Uncode by undsgn
CVE-2025-48107
WordPressUncode7.1HIGH

4 July 2025

Stored Cross-Site Scripting Vulnerability in Uncode Core Plugin for WordPress
CVE-2025-6944
WordPressUncode Core6.4MEDIUM

18 February 2025

Arbitrary Shortcode Execution Vulnerability in Uncode Core Plugin for WordPress
CVE-2024-13689
WordPressUncode Core6.3MEDIUM
Arbitrary File Read Vulnerability in Uncode Theme for WordPress
CVE-2024-13691
WordPressUncode6.5MEDIUM
Stored Cross-Site Scripting in Uncode Theme for WordPress
CVE-2024-13667
WordPressUncode5.4MEDIUM
Arbitrary File Read Vulnerability in Uncode Theme for WordPress
CVE-2024-13681
WordPressUncode7.5HIGH

17 April 2024

Missing Authorization vulnerability Affects Uncode Core
CVE-2023-51500
WordPressUncode Core7.7HIGH

12 April 2024

WordPress Uncode Core plugin <= 2.8.8 - Privilege Escalation vulnerability
CVE-2023-51515
WordPressUncode Core8.8HIGH

28 December 2023

WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-51501
WordpressUncode - Creative & Wo...7.1HIGH

11 October 2021

AccessPress Themes - Authenticated Malicious File Upload
CVE-2021-39317
WordPressAccess Demo Importer8.8HIGH