Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Uncodethemes Clear all filters
TI-2025-23561 CVE-2025-32496 · GHSA-x44w-4pwf-wpx2

WordPress Ultra Demo Importer plugin <= 1.0.5 - CSRF to RCE vulnerability

Priority MEDIUM 42

Cross-Site Request Forgery (CSRF) vulnerability in Uncodethemes Ultra Demo Importer ut-demo-importer allows Upload a Web Shell to a Web Server.This issue affects Ultra Demo Importer: from n/a through <= 1.0.5.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.00268 Published 2025-04-09 No fix listed CWE-352
TI-2024-12856 CVE-2024-13832 · GHSA-xf7g-g8qv-qggf

Ultra Addons Lite for Elementor <= 1.1.8 - Authenticated (Contributor+) Restricted Post Disclosure

Priority LOW 20

The Ultra Addons Lite for Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.1.8 via the 'ut_elementor' shortcode due to insufficient restrictions on which posts…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00327 Published 2025-02-28 No fix listed CWE-639