WordPress security by component
Soledad
Theme description
Soledad is a WordPress component with 17 published CVE records in this archive. The latest tracked vulnerability was published Jun 11, 2026; the highest CVE/CNA score is 9.8.
Theme slug:
soledadLatest vulnerability
CVE-2022-42479: Soledad: A security weakness
Soledad is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 8.2.5.
| Safe version |
|
||
|---|---|---|---|
| Jun 11, 2026 |
CVE-2022-42479
Soledad: A security weakness
Soledad is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is n/a through 8.2.5.
|
8.2.6 |
CVE5.4
NVDPending
|
| Feb 19, 2026 |
CVE-2026-27069
Soledad: Cross-site scripting
Soledad is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Dec 18, 2025 |
CVE-2025-64188
Soledad: Privilege escalation or authentication bypass
Soledad is affected by privilege escalation or authentication bypass. Exposure depends on how the affected operation is made reachable by the site. A successful request can grant permissions or access that the caller should not possess.
|
See mitigation notes |
CVE9.8
NVDPending
|
| Dec 16, 2025 |
CVE-2025-68066
Soledad: Filesystem traversal
Soledad is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Sep 22, 2025 |
CVE-2025-59589
Soledad: Cross-site scripting
Soledad is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Sep 22, 2025 |
CVE-2025-59588
Soledad: Filesystem traversal
Soledad is affected by filesystem traversal. Exposure depends on how the affected operation is made reachable by the site. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE7.5
NVDPending
|
| Aug 16, 2025 |
CVE-2025-8143
Soledad: Cross-site scripting
Soledad is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.4
NVDPending
|
| Aug 16, 2025 |
CVE-2025-8142
Soledad: Filesystem traversal
Soledad is affected by filesystem traversal. Exploitation requires at least contributor-level access. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.8
NVDPending
|
| Dec 06, 2024 |
CVE-2024-11289
Soledad: Filesystem traversal
Soledad is affected by filesystem traversal. The vulnerable path is reachable without authentication. A crafted path can escape the intended directory and reach files or directories elsewhere on the server.
|
See mitigation notes |
CVE8.1
NVDPending
|
| Apr 09, 2024 |
CVE-2024-31369
Soledad: Cross-site request forgery
Soledad is affected by cross-site request forgery. Exposure depends on how the affected operation is made reachable by the site. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.
|
See mitigation notes |
CVE5.4
NVDPending
|
| Apr 09, 2024 |
CVE-2024-31368
Soledad: A security weakness
Soledad is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE6.5
NVDPending
|
| Apr 09, 2024 |
CVE-2024-31367
Soledad: A security weakness
Soledad is affected by a security weakness. Exposure depends on how the affected operation is made reachable by the site. The resulting impact depends on how the affected component exposes the vulnerable operation.
|
See mitigation notes |
CVE7.1
NVDPending
|
| Dec 21, 2023 |
CVE-2023-49826
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: Code execution
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme is affected by code execution. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can run attacker-controlled code in the WordPress hosting account.
|
See mitigation notes |
CVE8.1
NVD9.8
|
| Dec 20, 2023 |
CVE-2023-49825
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: SQL injection
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
|
See mitigation notes |
CVE8.5
NVD8.1
|
| Dec 14, 2023 |
CVE-2023-49827
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme: Cross-site scripting
Soledad – Multipurpose, Newspaper, Blog & WooCommerce WordPress Theme is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE7.1
NVD6.1
|
| Nov 18, 2022 |
CVE-2022-41788
Soledad: Cross-site scripting
Soledad is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE5.4
NVD5.4
|
| Oct 10, 2022 |
CVE-2022-3209
soledad: Cross-site scripting
soledad is affected by cross-site scripting. Exposure depends on how the affected operation is made reachable by the site. Injected script can execute in the affected site's origin when the vulnerable output is viewed.
|
See mitigation notes |
CVE6.1
NVD6.1
|