Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: ultrapressorg Clear all filters
TI-2025-43876 CVE-2025-12828 · GHSA-4jg6-hhpg-69r5

Ultra Addons Lite for Elementor <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Type Out Widget

Priority LOW 28

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Type Out widget in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00184 Published 2026-10-03 No fix listed CWE-79
TI-2025-08319 CVE-2025-9077 · GHSA-8w35-frv7-c833

Cross-site scripting in ultrapressorg Ultra Addons Lite for Elementor

Priority LOW 28

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Animated Text' field of the Typeout Widget in version 1.1.9 and below due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00311 Published 2025-10-03 No fix listed CWE-79
TI-2025-23290 CVE-2025-32192 · GHSA-5834-r77w-87g8

WordPress Ultra Addons Lite for Elementor plugin <= 1.1.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UltraPress Ultra Addons Lite for Elementor ut-elementor-addons-lite allows Stored XSS.This issue affects Ultra Addons…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00407 Published 2025-04-04 No fix listed CWE-79
TI-2024-12856 CVE-2024-13832 · GHSA-xf7g-g8qv-qggf

Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure

Priority LOW 20

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-02-28 No fix listed CWE-639
TI-2024-06888 CVE-2024-7434 · GHSA-88rw-gmxx-j2pc

UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 41

The UltraPress theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.2 via deserialization of untrusted input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00624 Published 2024-10-01 No fix listed CWE-502