Read the docs

ultrapressorg

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

ultrapressorg records in CISA KEV

No ultrapressorg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Empowerment 1 record MEDIUM Ultrapress 1 record MEDIUM Unseen Blog 1 record MEDIUM

Records

7 records

TI-2024-06888 CVE-2024-7434 · GHSA-88rw-gmxx-j2pc

UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 41

The UltraPress theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.2 via deserialization of untrusted input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00624 Published 2024-10-01 No fix listed CWE-502
TI-2025-23290 CVE-2025-32192 · GHSA-5834-r77w-87g8

WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UltraPress Ultra Addons Lite for Elementor ut-elementor-addons-lite allows Stored XSS.This issue affects Ultra Addons…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79
TI-2025-43876 CVE-2025-12828 · GHSA-4jg6-hhpg-69r5

Ultra Addons Lite for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Type Out Widget

Priority LOW 28

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00184 Published 2026-10-03 No fix listed CWE-79
TI-2025-08319 CVE-2025-9077 · GHSA-8w35-frv7-c833

Cross-site scripting in ultrapressorg Ultra Addons Lite for Elementor

Priority LOW 28

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00311 Published 2025-10-03 No fix listed CWE-79
TI-2024-12856 CVE-2024-13832 · GHSA-xf7g-g8qv-qggf

Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure

Priority LOW 20

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-02-28 No fix listed CWE-639
Open these records in search →