Skip to content
OpenAdvisories

Vendor

admintwentytwenty

6 known vulnerabilities.

Products

UiPress lite | Effortless custom dashboards, admin themes and pages 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2025-3053

    UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.07 - Authenticated (Subscriber+) Remote Code Execution

    The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 via the uip_process_form_input() function. This is due to the function taking user…

    admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages Web / CMS
  • High 8.8
    CVE-2025-1309

    UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

    The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the uip_save_form_as_option() function i…

    admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages Web / CMS