Read the docs

UiPress

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

UiPress records in CISA KEV

No UiPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Uipress Lite 1 record LOW

Records

2 records

TI-2024-26021 CVE-2024-38788 · GHSA-926w-j626-wqw5

WordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00612 Published 2024-07-22 No fix listed CWE-89
TI-2026-21550 CVE-2026-27091 · GHSA-vcxx-p94p-37wg

WordPress UiPress lite plugin <= 3.5.09 - Broken Access Control vulnerability

Priority LOW 27

Missing Authorization vulnerability in UiPress UiPress lite uipress-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UiPress lite: from n/a through <= 3.5.09.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00163 Published 2026-03-19 No fix listed CWE-862
Open these records in search →