Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: admintwentytwenty Clear all filters
TI-2026-01939 CVE-2026-2294 · GHSA-r2mm-9gj3-rpm5

Improper authorization in admintwentytwenty UiPress lite | Effortless custom dashboards…

Priority LOW 19

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_global_settings' function…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00204 Published 2026-03-21 No fix listed CWE-285
TI-2025-10074 CVE-2025-11003 · GHSA-9j2r-fq55-vh22

UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

Priority LOW 28

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_ui_template' function in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00228 Published 2025-11-21 No fix listed CWE-862
TI-2025-10832 CVE-2025-11815 · GHSA-fq8w-f546-pvmw

Improper authorization in admintwentytwenty UiPress lite | Effortless custom dashboards…

Priority LOW 20

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the uip_save_site_option() function in…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-11-21 No fix listed CWE-285
TI-2025-02665 CVE-2025-3053 · GHSA-pf67-x6hq-5h3p

Code injection in admintwentytwenty UiPress lite | Effortless custom dashboards, admin…

Priority MEDIUM 42

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.5.07 via the uip_process_form_input() function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01123 Published 2025-05-15 No fix listed CWE-94
TI-2025-01122 CVE-2025-1309 · GHSA-7gr5-p3q8-fp6g

Missing authorization in admintwentytwenty UiPress lite | Effortless custom dashboards…

Priority MEDIUM 40

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on t…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00464 Published 2025-03-07 No fix listed CWE-862