UiPress lite | Effortless custom dashboards, admin themes and pages

Explore UiPress lite | Effortless custom dashboards, admin themes and pages vulnerabilities across all versions. Currently tracking 8 known vulnerabilities, including severity, impact, and patch status.

Strategic Overview

Avg CVSSMedium

6.6/ 10

Patch Coverage50%

Open

Fixed

Get automatic notifications for all UiPress lite | Effortless custom dashboards, admin themes and pages vulnerabilities before they are exploited.

Vulnerability Records

8 records


2026-03-20 15:10	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update UiPress lite <= 3.5.09	`CVE-2026-2294`	4.3 Medium	Tonggy	No
2026-03-10 00:00	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.09 - Missing Authorization UiPress lite <= 3.5.09	`CVE-2026-27091`	4.3 Medium	w41bu1	No
2025-11-20 19:18	UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure UiPress lite <= 3.5.08	`CVE-2025-10938`	6.5 Medium	abrahack	No
2025-11-20 19:18	UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting UiPress lite <= 3.5.08	`CVE-2025-11003`	6.4 Medium	abrahack	No
2025-11-20 19:17	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update UiPress lite <= 3.5.08	`CVE-2025-11815`	4.3 Medium	Rafshanzani Suhada	Yes
2025-05-14 00:00	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.07 - Authenticated (Subscriber+) Remote Code Execution UiPress lite <= 3.5.07	`CVE-2025-3053`	8.8 High	vulnmode2	Yes
2025-03-06 00:00	UiPress lite \| Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update UiPress lite <= 3.5.04	`CVE-2025-1309`	8.8 High	vgo0	Yes
2024-07-19 00:00	UiPress lite <= 3.4.06 - Authenticated (Administrator+) SQL Injection UiPress lite <= 3.4.06	`CVE-2024-38788`	9.1 Critical	Nguyễn Trung Kiên	Yes

Showing 1–8 of 8 reports