Read the docs

Uncodethemes

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Uncodethemes records in CISA KEV

No Uncodethemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ultra Addons Lite For Elementor 1 record LOW

Records

2 records

TI-2025-23561 CVE-2025-32496 · GHSA-x44w-4pwf-wpx2

WordPress Ultra Demo Importer plugin <= 1.0.5 - CSRF to RCE vulnerability

Priority MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer ut-demo-importer allows Upload a Web Shell to a Web Server.This issue affects Ultra Demo Importer: from n/a through <= 1.0.5.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00268 Published 2025-04-09 No fix listed CWE-352
TI-2024-12856 CVE-2024-13832 · GHSA-xf7g-g8qv-qggf

Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure

Priority LOW 20

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-02-28 No fix listed CWE-639
Open these records in search →