Threats tagged 'ghsa-9j2r-fq55-vh22'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.4	EPSS 0.2%	CVE-2025-11003UiPress lite \| Effortless custom dashboards, admin themes and pages (WordPress plugin) · Missing Authorization Medium6.4EPSS 0.2%2025-11-21CVE Database V5CVE-2025-11003 The UiPress lite \| Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_ui_template' function in all versions up to, and including, 3.5.09. This makes it possible for authenticated attackers, with Subscriber-level access and above, to save templates that contain custom JavaScript. EPSS 0.2%Vulnerability admintwentytwenty #cwe-862 #ghsa-9j2r-fq55-vh22	CVE Database V5	2025-11-21

Page 1 of 1