Undsgn

9 CVEs across 3 Undsgn products. Browse Undsgn vulnerabilities, severities, and proof-of-concept exploits.

Undsgn products with known CVEs

ProductCVEs
Uncode5
Uncode Core4
Uncode - Creative & Woocommerce WordPress Theme1
Undsgn CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-48107High7.12025-09-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undsgn Uncode uncode allows Reflected XSS.This issue affe…
CVE-2025-6944Medium6.42025-07-04The Uncode Core plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uncode_hl_text' and 'uncode_text_icon' shortcodes in all ve…
CVE-2024-13689Medium6.32025-02-18The Uncode Core plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.9.1.6. This is due to the software…
CVE-2024-13691Medium6.52025-02-18The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_recordMedia' function in all versions u…
CVE-2024-13681High7.52025-02-18The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versi…
CVE-2024-13667Medium5.42025-02-18The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 d…
CVE-2023-51500High7.72024-04-17Missing Authorization vulnerability in Undsgn Uncode Core.This issue affects Uncode Core: from n/a through 2.8.8.
CVE-2023-51515High8.82024-04-12Missing Authorization vulnerability in Undsgn Uncode Core allows Privilege Escalation.This issue affects Uncode Core: from n/a through 2.8.8.
CVE-2023-51501High7.12023-12-28Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Undsgn Uncode - Creative & WooCommerce WordPress Theme al…