Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

soledad — Vulnerabilities & Security Advisories 14

All 14 CVE vulnerabilities found in soledad, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerability data for the soledad theme, a widely used WordPress framework, categorized by weakness type and tagged with relevant CVE identifiers. It collects reported security flaws affecting various versions of this product, spanning from the earliest documented issues in the mid-2010s through recent disclosures. Users can leverage this dataset to track the vendor’s historical advisory patterns, analyze the prevalence of specific weakness classes such as SQL injection or cross-site scripting, and review the complete vulnerability history associated with the soledad codebase. The compilation serves as a reference for security researchers, compliance officers, and developers seeking to understand potential risk vectors within this specific software ecosystem. By examining the chronological distribution of these entries, stakeholders can identify recurring failure points and assess the longevity of unpatched vulnerabilities. This resource focuses exclusively on confirmed security exposures impacting the soledad theme, providing a structured view of how its security posture has evolved over time. It does not include speculative risks or unverified reports, ensuring that the listed items represent documented security events with public records. This aggregation facilitates comparative analysis across different timeframes and vulnerability categories, aiding in the development of more robust security testing strategies for WordPress-based applications.

Vendor: Unknown

CVE ID Title CVSS Severity Published
CVE-2022-42479 WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability CWE-862 5.4 Medium 2026-06-11
CVE-2026-27069 WordPress Soledad theme <= 8.7.2 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-02-19
CVE-2025-64188 WordPress Soledad theme <= 8.6.9 - Privilege Escalation vulnerability CWE-266 9.8 Critical 2025-12-18
CVE-2025-68066 WordPress Soledad theme <= 8.7.0 - Local File Inclusion vulnerability CWE-98 7.5 High 2025-12-16
CVE-2025-59588 WordPress Soledad Theme <= 8.6.8 - Local File Inclusion Vulnerability CWE-98 7.5 High 2025-09-22
CVE-2025-59589 WordPress Soledad Theme <= 8.6.8 - Cross Site Scripting (XSS) Vulnerability CWE-79 6.5 Medium 2025-09-22
CVE-2025-8143 Soledad <= 8.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h' CWE-79 6.4 Medium 2025-08-16
CVE-2025-8105 Soledad <= 8.6.7 - Unauthenticated Arbitrary Shortcode Execution CWE-94 7.3 High 2025-08-16
CVE-2025-8142 Soledad <= 8.6.7 - Authenticated (Contributor+) Local File Inclusion via 'header_layout' CWE-98 8.8 High 2025-08-16
CVE-2024-11289 Soledad <= 8.5.9 - Unauthenticated Limited Local File Inclusion CWE-98 8.1 High 2024-12-06
CVE-2024-31369 WordPress Soledad theme <= 8.4.2 - Cross Site Request Forgery (CSRF) vulnerability CWE-352 5.4 Medium 2024-04-09
CVE-2024-31368 WordPress Soledad theme <= 8.4.2 - Unauthenticated Broken Access Control vulnerability CWE-862 6.5 Medium 2024-04-09
CVE-2024-31367 WordPress Soledad theme <= 8.4.2 - Authenticated Broken Access Control vulnerability CWE-862 7.1 High 2024-04-09
CVE-2022-3209 Soledad < 8.2.5 - Reflected Cross-site Scripting CWE-79 6.1 - 2022-10-10

All 14 known CVE vulnerabilities affecting soledad with full Chinese analysis, references, and POCs where available.