WordSec
WordSec

Soledad

Explore Soledad vulnerabilities across all versions. Currently tracking 18 known vulnerabilities, including severity, impact, and patch status.

01234567891013.09.2022Today13.09.20226.1Soledad <= 8.2.4 - Reflected Cross-Site Scripting CVSS 6.1 · 13.09.202230.10.20226.4Soledad <= 8.2.5 - Authenticated (Subscriber+) Cross-Site Scripting CVSS 6.4 · 30.10.202201.11.20225.4Soledad <= 8.2.5 - Missing Authorization CVSS 5.4 · 01.11.202205.12.20238.8Soledad <= 8.4.1 - Authenticated (Contributor+) SQL Injection CVSS 8.8 · 05.12.20239.8Soledad <= 8.4.1 - Unauthenticated PHP Object Injection CVSS 9.8 · 05.12.20236.1Soledad <= 8.4.1 - Reflected Cross-Site Scripting CVSS 6.1 · 05.12.202309.04.20244.3Soledad <= 8.4.5 - Cross-Site Request Forgery CVSS 4.3 · 09.04.20245.3Soledad <= 8.4.5 - Missing Authorization CVSS 5.3 · 09.04.20244.3Soledad <= 8.4.5 - Missing Authorization CVSS 4.3 · 09.04.202405.12.20248.1Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion CVSS 8.1 · 05.12.202415.08.20256.4Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' CVSS 6.4 · 15.08.20257.3Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution CVSS 7.3 · 15.08.20258.8Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' CVSS 8.8 · 15.08.202522.09.20257.5Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion CVSS 7.5 · 22.09.20256.4Soledad <= 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 22.09.202523.10.20258.8Soledad < = 8.6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update CVSS 8.8 · 23.10.202528.10.20257.5Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion CVSS 7.5 · 28.10.202510.01.20266.4Soledad <= 8.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVSS 6.4 · 10.01.2026

Strategic Overview

Avg CVSSMedium
6.9/ 10
Patch Coverage89%
Open

2

Fixed

16

Get automatic notifications for all Soledad vulnerabilities before they are exploited.

Vulnerability Records

18 records
2026-01-10 00:00
Soledad <= 8.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Soledad
<= 8.7.2
CVE-2026-27069
6.4
Medium
João Pedro Soares de AlcântaraNo
2025-10-28 00:00
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
Soledad
<= 8.7.0
CVE-2025-68066
7.5
High
João Pedro Soares de AlcântaraNo
2025-10-23 00:00
Soledad < = 8.6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Soledad
<= 8.6.9
CVE-2025-64188
8.8
High
Denver JacksonYes
2025-09-22 00:00
Soledad <= 8.6.8 - Authenticated (Contributor+) Local File Inclusion
Soledad
<= 8.6.8
CVE-2025-59588
7.5
High
João Pedro Soares de AlcântaraYes
2025-09-22 00:00
Soledad <= 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Soledad
<= 8.6.8
CVE-2025-59589
6.4
Medium
João Pedro Soares de AlcântaraYes
2025-08-15 00:00
Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Soledad
<= 8.6.7
CVE-2025-8143
6.4
Medium
stealthcopterYes
2025-08-15 00:00
Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution
Soledad
<= 8.6.7
CVE-2025-8105
7.3
High
stealthcopterYes
2025-08-15 00:00
Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Soledad
<= 8.6.7
CVE-2025-8142
8.8
High
stealthcopterYes
2024-12-05 00:00
Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion
Soledad
<= 8.5.9
CVE-2024-11289
8.1
High
FoxyyyYes
2024-04-09 00:00
Soledad <= 8.4.5 - Cross-Site Request Forgery
Soledad
<= 8.4.5
CVE-2024-31369
4.3
Medium
Rafie MuhammadYes
Showing 1–10 of 18 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C