CVE-2025-11003

MediumCVSS 6.4

Published: 21/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 15/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

10th percentile - higher than 10% of all known CVEs

Summary

The UiPress lite plugin for WordPress in all versions up to and including 3.5.09 is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_ui_template' function. An authenticated attacker with Subscriber-level access or above can save templates containing custom JavaScript.

Risk Assessment

A low-privileged attacker can inject malicious JavaScript into templates, potentially leading to XSS attacks and user session takeover. The risk affects all WordPress sites with the vulnerable plugin version installed.

Recommendation

Update the UiPress lite plugin to a version newer than 3.5.09 or remove it if not in use. Additionally, consider reviewing existing templates for unauthorized modifications.

Other vulnerabilities in UiPress lite

CVE-2025-10938Medium
The UiPress lite plugin for WordPress in all versions up to and including 3.5.08 is vulnerable to Sensitive Information Exposure. This is due to missing capability checks in the 'uip_process_block_query' AJAX function. An authenticated attacker with subscriber-level access or above can extract sensitive user data including password hashes, emails, and other information that could be used for account takeover attacks.

Original NVD description (English source)

The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'uip_save_ui_template' function in all versions up to, and including, 3.5.09. This makes it possible for authenticated attackers, with Subscriber-level access and above, to save templates that contain custom JavaScript.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS