PT-2025-47673
CVE-2025-11003
·
Published
2025-11-20
·
Updated
2026-09-14
Description by
CVSS 3.1
6.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
UiPress lite versions prior to 3.5.09
Description
The UiPress lite plugin for WordPress allows authenticated attackers with Subscriber-level access or higher to save templates containing custom JavaScript due to a missing capability check on the
uip save ui template function. This can lead to unauthorized modification of data.Recommendations
Update UiPress lite to version 3.5.09 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾