Penci Soledad Data Migrator vulnerabilities

2 known vulnerabilities in Penci Soledad Data Migrator from PenciDesign. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Penci Soledad Data Migrator: Improper Neutralization of Input During Web Page Generation

  CVE-2026-27054Mar 25, 2026PenciDesign

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PenciDesign Penci Soledad Data Migrator penci-data-migrator allows Reflected XSS.This issue affects Penci Soledad Data Migrator: from n/a through <= 1.3.1.

• 9.8 Critical severity

  Penci Soledad Data Migrator: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-3551May 17, 2024PenciDesign

  The Penci Soledad Data Migrator plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.3.0 via the 'data' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the