admintwentytwenty

Products

Exploited and recent CVEs

  • CVE-2026-2294 Medium 4.3 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update 0.2%
  • CVE-2025-10938 Medium 6.5 UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure 0.3%
  • CVE-2025-11003 Medium 6.4 UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
  • CVE-2025-11815 Medium 4.3 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update 0.2%
  • CVE-2025-3053 High 8.8 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.07 - Authenticated (Subscriber+) Remote Code Execution 1.1%
  • CVE-2025-1309 High 8.8 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update 0.5%