pencidesign vulnerabilities and threats

29 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-27054Penci Soledad Data Migrator (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-03-25CVE Database V5CVE-2026-27054 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-data-migrator allows Reflected XSS.This issue affects Penci Soledad Data Migrator: from n/a through <= 1.3.1. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-03-25
Medium	6.5	EPSS 0.2%	CVE-2026-27069Soledad (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-02-19CVE Database V5CVE-2026-27069 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Soledad soledad allows DOM-Based XSS.This issue affects Soledad: from n/a through <= 8.7.2. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-02-19
Medium	6.5	EPSS 0.2%	CVE-2026-27059Penci Recipe (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-02-19CVE Database V5CVE-2026-27059 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Recipe penci-recipe allows DOM-Based XSS.This issue affects Penci Recipe: from n/a through <= 4.1. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-02-19
Medium	6.5	EPSS 0.2%	CVE-2026-27058Penci Podcast (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-02-19CVE Database V5CVE-2026-27058 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Podcast penci-podcast allows DOM-Based XSS.This issue affects Penci Podcast: from n/a through <= 1.7. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-02-19
Medium	6.5	EPSS 0.2%	CVE-2026-27057Penci Filter Everything (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-02-19CVE Database V5CVE-2026-27057 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows Stored XSS.This issue affects Penci Filter Everything: from n/a through <= 1.7. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-02-19
Medium	4.3	EPSS 0.2%	CVE-2026-27055Penci AI SmartContent Creator (WordPress plugin) · Missing Authorization Medium4.3EPSS 0.2%2026-02-19CVE Database V5CVE-2026-27055 Missing Authorization vulnerability in PenciDesign Penci AI SmartContent Creator penci-ai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Penci AI SmartContent Creator: from n/a through <= 2.0. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-02-19
Medium	6.5	EPSS 0.2%	CVE-2026-24601Penci Pay Writer (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-01-23CVE Database V5CVE-2026-24601 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Pay Writer penci-pay-writer allows Stored XSS.This issue affects Penci Pay Writer: from n/a through <= 1.5. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-01-23
Medium	6.5	EPSS 0.2%	CVE-2026-24600Penci Review (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-01-23CVE Database V5CVE-2026-24600 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Review penci-review allows Stored XSS.This issue affects Penci Review: from n/a through <= 3.5. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-01-23
Medium	6.5	EPSS 0.2%	CVE-2026-24354Penci Shortcodes & Performance (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2026-01-22CVE Database V5CVE-2026-24354 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Shortcodes & Performance penci-shortcodes allows DOM-Based XSS.This issue affects Penci Shortcodes & Performance: from n/a through <= 6.1. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2026-01-22
High	8.1	EPSS 0.5%	CVE-2025-64223PenNews (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.1EPSS 0.5%2025-12-18CVE Database V5CVE-2025-64223 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign PenNews pennews allows PHP Local File Inclusion.This issue affects PenNews: from n/a through < 6.7.3. EPSS 0.5%Vulnerability PenciDesign	CVE Database V5	2025-12-18
Critical	9.8	EPSS 0.4%	CVE-2025-64188Soledad (WordPress plugin) · Incorrect Privilege Assignment Critical9.8EPSS 0.4%2025-12-18CVE Database V5CVE-2025-64188 Incorrect Privilege Assignment vulnerability in PenciDesign Soledad soledad allows Privilege Escalation.This issue affects Soledad: from n/a through <= 8.6.9. EPSS 0.4%Vulnerability PenciDesign CWE-266	CVE Database V5	2025-12-18
High	7.5	EPSS 0.4%	CVE-2025-68066Soledad (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.4%2025-12-16CVE Database V5CVE-2025-68066 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through <= 8.7.0. EPSS 0.4%Vulnerability PenciDesign	CVE Database V5	2025-12-16
Medium	5.3	EPSS 0.3%	CVE-2025-67572PenNews (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-12-09CVE Database V5CVE-2025-67572 Missing Authorization vulnerability in PenciDesign PenNews pennews allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PenNews: from n/a through < 6.7.4. EPSS 0.3%Vulnerability PenciDesign	CVE Database V5	2025-12-09
High	7.1	EPSS 0.2%	CVE-2025-49909Penci Bookmark & Follow (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-11-06CVE Database V5CVE-2025-49909 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Bookmark & Follow penci-bookmark-follow allows Reflected XSS.This issue affects Penci Bookmark & Follow: from n/a through < 2.4. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2025-11-06
Medium	6.5	EPSS 0.2%	CVE-2025-59583Penci Filter Everything (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59583 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Filter Everything penci-filter-everything allows DOM-Based XSS.This issue affects Penci Filter Everything: from n/a through < 1.7. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-59584Penci Podcast (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59584 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Podcast penci-podcast allows DOM-Based XSS.This issue affects Penci Podcast: from n/a through <= 1.6. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-59585Penci Recipe (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59585 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Recipe penci-recipe allows DOM-Based XSS.This issue affects Penci Recipe: from n/a through <= 4.0. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-59586Penci Portfolio (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59586 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Portfolio penci-portfolio allows DOM-Based XSS.This issue affects Penci Portfolio: from n/a through <= 3.5. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2025-09-22
Medium	6.5	EPSS 0.2%	CVE-2025-59587Penci Shortcodes & Performance (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-09-22CVE Database V5CVE-2025-59587 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Shortcodes & Performance penci-shortcodes allows DOM-Based XSS.This issue affects Penci Shortcodes & Performance: from n/a through < 6.1. EPSS 0.2%Vulnerability PenciDesign	CVE Database V5	2025-09-22
High	7.5	EPSS 0.4%	CVE-2025-59588Soledad (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High7.5EPSS 0.4%2025-09-22CVE Database V5CVE-2025-59588 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PenciDesign Soledad soledad allows PHP Local File Inclusion.This issue affects Soledad: from n/a through <= 8.6.8. EPSS 0.4%Vulnerability PenciDesign	CVE Database V5	2025-09-22

Page 1 of 2