Remote Code Execution Vulnerability in UiPress Lite Plugin for WordPress

CVE-2025-3053

What is CVE-2025-3053?

The UiPress Lite plugin for WordPress is susceptible to a Remote Code Execution vulnerability through the uip_process_form_input() function. This function inadequately validates user input, allowing authenticated attackers with Subscriber-level access or higher to execute arbitrary code on the server. The absence of proper capability checks poses a significant risk to WordPress installations running versions up to and including 3.5.07, potentially leading to unauthorized actions and system compromise.

References