UiPress lite | Effortless custom dashboards, admin themes and pages
UiPress lite | Effortless custom dashboards, admin themes and pages has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 5 are fixed and 3 remain unpatched as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 9.1 out of 10. Severity breakdown: 1 critical and 2 high. 2025 was the busiest year with 5 disclosures.
The most common weakness is Missing Authorization, behind 4 of the records (50%). Other recurring categories include Improper Authorization, Code Injection.
5 of the records (63%) have a vendor fix, while 3 remain unpatched. The oldest unresolved one dates back to 2025.
7 independent researchers contributed these findings, most of them (2) reported by abrahack. UiPress lite | Effortless custom dashboards, admin themes and pages is installed on roughly 6,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 0.
CVE-2025-10938UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure
Read the full analysisVulnerability Records
UiPress lite | Effortless custom dashboards, admin themes and pages
Author
UiPress
UiPress is a block based visual builder for the WordPress admin. Create admin pages, dashboards and WordPress admin themes with no code. From custom dashboards, profile pages to entire admin frameworks, the uiBuilder can do it all. Pre-made intuitive blocks and a library of professional templates make it super easy to transform the way your site users interact with your content. Learn more, browse templates, and get documentation at uipress.co. Major features in ui press lite include: A fast, modern and intuitive block based builder Create functional admin pages and ui templates Fully responsive templates Developer friendly with an extendable API Custom forms that can do anything, whether it be sending emails, passing form data to functions or saving the data to site options or user meta, UiPress has you covered. Global styles system Smart patterns for saving out templates and updating across all your templates Over 50+ blocks and counting Custom login pages Google analytics Woocommerce analytics User role editor Private user posts and media Integrated php error log A powerful builder that lets you customise everything With the uiBuilder you are in control, it’s easy to use, lightning fast and packed full of features. Creating custom admin pages and UI frameworks that go beyond just the visual has never been so easy. Forms that go the extra mile The form block allows you to create and customise unique forms for any purpose. Whether it be sending emails, passing form data to functions or saving the data to site options or user meta, UiPress has you covered. Beautiful login pages Modernise the login experience for your site users with the ui press login page settings. Match the login page to your brand for a smooth user experience. The uiBuilder is a modern web app and is built with Vue.js UiPress has countless options and customisations built in including the option to override block templates. For those that want to go further, the UiPress developer API makes it easy to create custom blocks, options and more.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C