Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: UiPress Clear all filters
TI-2026-21550 CVE-2026-27091 · GHSA-vcxx-p94p-37wg

WordPress UiPress lite plugin <= 3.5.09 - Broken Access Control vulnerability

Priority LOW 27

Missing Authorization vulnerability in UiPress UiPress lite uipress-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UiPress lite: from n/a through <= 3.5.09.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00163 Published 2026-03-19 No fix listed CWE-862
TI-2024-26021 CVE-2024-38788 · GHSA-926w-j626-wqw5

WordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00612 Published 2024-07-22 No fix listed CWE-89