Read the docs

admintwentytwenty

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

admintwentytwenty records in CISA KEV

No admintwentytwenty vulnerabilities are listed in CISA KEV.

Records

6 records

TI-2025-02665 CVE-2025-3053 · GHSA-pf67-x6hq-5h3p

Code injection in admintwentytwenty UiPress lite | Effortless custom dashboards, admin…

Priority MEDIUM 42

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 via the uip_process_form_input() function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2025-05-15 No fix listed CWE-94
TI-2025-01122 CVE-2025-1309 · GHSA-7gr5-p3q8-fp6g

Missing authorization in admintwentytwenty UiPress lite | Effortless custom dashboards…

Priority MEDIUM 40

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00464 Published 2025-03-07 No fix listed CWE-862
TI-2025-10074 CVE-2025-11003 · GHSA-9j2r-fq55-vh22

UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

Priority LOW 28

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_ui_template' function in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00226 Published 2025-11-21 No fix listed CWE-862
TI-2025-10832 CVE-2025-11815 · GHSA-fq8w-f546-pvmw

Improper authorization in admintwentytwenty UiPress lite | Effortless custom dashboards…

Priority LOW 20

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the uip_save_site_option() function in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-11-21 No fix listed CWE-285
TI-2026-01939 CVE-2026-2294 · GHSA-r2mm-9gj3-rpm5

Improper authorization in admintwentytwenty UiPress lite | Effortless custom dashboards…

Priority LOW 19

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_global_settings' function…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00204 Published 2026-03-21 No fix listed CWE-285
Open these records in search →