Skip to content
OpenAdvisories

Vendor

AndonDesign

8 known vulnerabilities.

Products

UDesign Core 5 UDesign 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-62051

    WordPress UDesign Core plugin <= 4.14.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AndonDesign UDesign Core u-design-core.This issue affects UDesign Core: from n/a through <= 4.14.1.

    AndonDesign UDesign Core
  • Medium 6.3
    CVE-2025-53236

    WordPress UDesign Core plugin <= 4.14.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in AndonDesign UDesign Core u-design-core allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UDesign Core: from n/a through <= 4.14.0.

    AndonDesign UDesign Core
  • Medium 5.3
    CVE-2025-24757

    WordPress uDesign theme <= 4.11.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in AndonDesign uDesign udesign.This issue affects uDesign: from n/a through <= 4.11.2.

    AndonDesign UDesign