soledad

soledad

Vulnerabilities:

16

Last Updated:

February 4, 2026

Active Installs:

n/a

Published
Title
Fixed in
CVSS
Published
2025-10-28
Title
Soledad <= 8.7.0 - Authenticated (Contributor+) Local File Inclusion
Fixed in
No known fix
CVSS
7.5 (high)
Published
2025-10-23
Title
Soledad < = 8.6.9 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Fixed in
Fixed in 8.6.9.1
CVSS
8.8 (high)
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Local File Inclusion
Fixed in
Fixed in 8.6.9
CVSS
7.5 (high)
Published
2025-09-22
Title
Soledad < 8.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 8.6.9
CVSS
6.4 (medium)
Published
2025-08-15
Title
Soledad < 8.6.8 - Unauthenticated Arbitrary Shortcode Execution
Fixed in
Fixed in 8.6.8
CVSS
7.3 (high)
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Local File Inclusion via 'header_layout'
Fixed in
Fixed in 8.6.8
CVSS
8.8 (high)
Published
2025-08-15
Title
Soledad < 8.6.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'pcsml_smartlists_h'
Fixed in
Fixed in 8.6.8
CVSS
6.4 (medium)
Published
2024-12-05
Title
Soledad < 8.6.0 - Unauthenticated Limited Local File Inclusion
Fixed in
Fixed in 8.6.0
CVSS
8.1 (high)
Published
2024-04-09
Title
Soledad < 8.4.6 - Missing Authorization
Fixed in
Fixed in 8.4.6
CVSS
4.3 (medium)
Published
2024-04-09
Title
Soledad < 8.4.6 - Cross-Site Request Forgery
Fixed in
Fixed in 8.4.6
CVSS
4.3 (medium)
Published
2024-04-09
Title
Soledad < 8.4.6 - Missing Authorization
Fixed in
Fixed in 8.4.6
CVSS
5.3 (medium)
Published
2023-12-05
Title
Soledad < 8.4.2 - Authenticated (Contributor+) SQL Injection
Fixed in
Fixed in 8.4.2
CVSS
8.8 (high)
Published
2023-12-05
Title
Soledad < 8.4.2 - Unauthenticated PHP Object Injection
Fixed in
Fixed in 8.4.2
CVSS
9.8 (critical)
Published
2023-12-05
Title
Soledad < 8.4.2 - Reflected Cross-Site Scripting
Fixed in
Fixed in 8.4.2
CVSS
6.1 (medium)
Published
2022-10-30
Title
Soledad < 8.2.6 - Subscriber+ Cross-Site Scripting
Fixed in
Fixed in 8.2.6
CVSS
5.4 (medium)
Published
2022-09-13
Title
Soledad < 8.2.5 - Reflected Cross-site Scripting
Fixed in
Fixed in 8.2.5
CVSS
4.7 (medium)