UiPress UiPress Lite Missing Authorization Vulnerability Allowing Access Control Bypass

A missing authorization vulnerability has been identified in the UiPress Lite WordPress plugin, affecting versions through 3.5.09. This vulnerability arises from incorrectly configured access control security levels, which can be exploited to perform actions reserved for higher privileged users.

Impact

Exploitation of this vulnerability allows for broken access control, enabling users to perform actions without the necessary permissions.

Remediation

Users are advised to update the UiPress Lite plugin to the latest version. If an update is not possible, consult with your hosting provider or web developer for assistance.