UiPress lite · Security record
Is UiPress lite safe?
4 known vulnerabilities affect the current version (3.5.10), and they have no fix yet.
Checked 5 days ago against the WPVulnerability database, for version 3.5.10.
How it’s looked after
- Last release
- Sep 3, 2026 (2 months ago)
- Releases in the last year
- 2
- Support resolved
- 0 of 1 threads in two months
- Active installs
- 6K+
8 known vulnerabilities
- 3 high
- 3 medium
- 2 not rated
4 affect the current version. 4 have no fix yet.
Disclosed each year
- 20241
- 20255
- 20262
Every known vulnerability in UiPress lite
Newest first, with any that affect the current version at the top.
Affects the current version · No fix yet · CVE-2026-2294 · Mar 20, 2026 · Wordfence
Affects the current version · No fix yet · CVE-2026-27091 · Mar 10, 2026 · Wordfence
Affects the current version · No fix yet · CVE-2025-11003 · Nov 20, 2025 · Wordfence
Affects the current version · No fix yet · CVE-2025-10938 · Nov 20, 2025 · Wordfence
Fixed in 3.5.09 · CVE-2025-11815 · Nov 20, 2025 · Wordfence
Fixed in 3.5.08 · CVE-2025-3053 · May 14, 2025 · Wordfence
Fixed in 3.5.05 · CVE-2025-1309 · Mar 6, 2025 · Wordfence
Fixed in 3.4.07 · CVE-2024-38788 · Jul 19, 2024 · Wordfence
Questions about UiPress lite’s security
Is UiPress lite safe to use?
Yes: 4 known vulnerabilities affect version 3.5.10, according to WPVulnerability’s database. Until a fixed version is out, weigh the risk, or switch to an alternative.
Does UiPress lite have known security vulnerabilities?
Yes: 4 known vulnerabilities affect version 3.5.10, according to WPVulnerability’s database.
Is UiPress lite still maintained?
Yes. Its last release was 2 months ago. Its authors resolved 0 of the 1 support threads opened in the last two months.
Hear about the next one first
Track your plugin on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every plugin updated.