PT-2025-6592

Name of the Vulnerable Software and Affected Versions Uncode theme for WordPress versions up to, and including, 2.9.1.6 Description The issue is related to Stored Cross-Site Scripting, which occurs due to insufficient input sanitization and output escaping. This allows authenticated attackers wit...

PT-2025-6594

Name of the Vulnerable Software and Affected Versions Uncode theme for WordPress versions up to, and including, 2.9.1.6 Description The issue is related to insufficient input validation in the uncode admin get oembed function, allowing unauthenticated attackers to read arbitrary files on the...