CVE-2025-1309: Missing Authorization

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the uipsaveformasoption function in all versions up to, and including, 3.5.04...

PT-2025-10049

Name of the Vulnerable Software and Affected Versions UiPress lite versions up to, and including, 3.5.04 Description The issue allows unauthorized modification of data, potentially leading to privilege escalation, due to a missing capability check on the uip save form as option function. This...

WordPress UiPress lite plugin <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by vgo0 in WordPress Plugin UiPress lite versions = 3.5.04...

CVE-2024-38788

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06...

CVE-2024-38788

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06...

CVE-2024-38788

CVE-2024-38788 concerns UiPress lite (WordPress) with an SQL Injection vulnerability in versions up to 3.4.06. Root cause per Patchstack: improper neutralization of input in SQL commands. Impact per sources: potential unauthorized access via SQL injection; patch released in 3.4.07. Recommendation...

CVE-2024-38788 WordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06...

CVE-2024-38788 WordPress UiPress lite plugin <= 3.4.06 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06...

CVE-2024-38788: Improper Neutralization of Special Elements used in an SQL Command

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Bởi Admin 2020 UiPress lite allows SQL Injection.This issue affects UiPress lite: from n/a through 3.4.06...

PT-2024-28221

Name of the Vulnerable Software and Affected Versions UiPress lite versions 3.4.06 and earlier Description The issue is related to an SQL Injection vulnerability due to improper neutralization of special elements used in an SQL command. This allows for SQL Injection attacks. Recommendations For...

WordPress uipress-lite plugin <= 3.4.06 - SQL Injection vulnerability

SQL Injection vulnerability discovered by Nguyễn Trung Kiên Patchstack Alliance in WordPress Plugin UiPress lite versions = 3.4.06...

WordPress UiPress lite Plugin <= 3.4.06 is vulnerable to SQL Injection

Software UiPress lite Type Plugin Vulnerable versions = 3.4.06 Fixed in 3.4.07 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2024-38788 Patch priority Low CVSS severity Low 7.6 Developer Claim ownership PSID 8c36c4e4e9c9 Credits Nguyễn Trung Kiên anhchangmutrang Required privile...