Undsgn vulnerabilities
We track 2 vulnerabilities in Undsgn products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 26, 2025.
2vulnerabilities
0critical
2high
0exploited
7.3average CVSS score
Latest Undsgn vulnerabilities
- 7.1 High severity
Uncode: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undsgn Uncode uncode allows Reflected XSS.This issue affects Uncode: from n/a through < 2.9.4.4.
- 7.5 High severity
The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input…
The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbit