What’s Vulnerable › Products

admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages version is affected

Latest admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages vulnerabilities

• CVE-2026-2294 — UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update (CVSS 4.3)
• CVE-2025-11815 — UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update (CVSS 4.3)
• CVE-2025-11003 — UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2025-10938 — UiPress lite <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure (CVSS 6.5)
• CVE-2025-3053 — UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.07 - Authenticated (Subscriber+) Remote Code Execution (CVSS 8.8)
• CVE-2025-1309 — UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update (CVSS 8.8)