https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:43:16 +0000 https://cve.radiocsirt.org/vuln/cve-2025-10938 <p><strong>Affected:</strong> admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages</p> <p>The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the &#39;uip_process_block_query&#39; AJAX function. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive user data including password hashes, emails, and other user information that could be used for account takeover attacks.</p> <p><strong>Affected:</strong> admintwentytwenty UiPress lite | Effortless custom dashboards, admin themes and pages</p> <p>The UiPress lite plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.5.08. This is due to missing capability checks in the &#39;uip_process_block_query&#39; AJAX function. This makes it possible for authenticated attackers, with subscriber-level access and above, to extract sensitive user data including password hashes, emails, and other user information that could be used for account takeover attacks.</p> https://cve.radiocsirt.org/vuln/cve-2025-10938