VendorsUndsgnuncodeall versions
Vulnerabilities

Undsgn Uncode

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2024-13681
Uncode <= 2.9.1.6 - Unauthenticated Arbitrary File Read in uncode_admin_get_oembed
Published 2025-02-18 · Analyzed
7.5EPSS 0.006
CVE-2023-51501
WordPress Uncode Core Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-28 · Modified
7.1EPSS 0.004
CVE-2024-13691
Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Arbitrary File Read in uncode_recordMedia
Published 2025-02-18 · Analyzed
6.5EPSS 0.004
CVE-2024-13667
Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description
Published 2025-02-18 · Analyzed
5.4EPSS 0.002