Uncode vulnerabilities

2 known vulnerabilities in Uncode from Undsgn. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Uncode: Improper Neutralization of Input During Web Page Generation

  CVE-2025-48107Sep 26, 2025Undsgn

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in undsgn Uncode uncode allows Reflected XSS.This issue affects Uncode: from n/a through < 2.9.4.4.

• 7.5 High severity

  The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input…

  CVE-2024-13681Feb 18, 2025Undsgn

  The Uncode theme for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'uncode_admin_get_oembed' function in all versions up to, and including, 2.9.1.6. This makes it possible for unauthenticated attackers to read arbit