Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

admintwentytwenty — Vulnerabilities & Security Advisories 6

Browse all 6 CVE security advisories affecting admintwentytwenty. AI-powered Chinese analysis, POCs, and references for each vulnerability.

AdminTwentyTwenty is a web administration panel primarily used for managing server infrastructure and web applications. Historically, it has been associated with multiple remote code execution (RCE) vulnerabilities, cross-site scripting (XSS), and privilege escalation flaws. The software's six recorded CVEs highlight consistent security weaknesses, particularly in input validation and access control. While no major public incidents have been documented, the pattern of vulnerabilities suggests potential for significant exploitation if deployed without hardening. Its core functionality as an administrative tool makes it an attractive target for attackers seeking system compromise.

CVE ID Title CVSS Severity Published
CVE-2026-2294 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.09 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update — UiPress lite | Effortless custom dashboards, admin themes and pages CWE-285 4.3 Medium 2026-03-21
CVE-2025-10938 UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure — UiPress lite | Effortless custom dashboards, admin themes and pages CWE-862 6.5 Medium 2025-11-21
CVE-2025-11003 UiPress lite <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting — UiPress lite | Effortless custom dashboards, admin themes and pages CWE-862 6.4 Medium 2025-11-21
CVE-2025-11815 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.08 - Missing Authorization to Authenticated (Subscriber+) Plugin Settings Update — UiPress lite | Effortless custom dashboards, admin themes and pages CWE-285 4.3 Medium 2025-11-21
CVE-2025-3053 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.07 - Authenticated (Subscriber+) Remote Code Execution — UiPress lite | Effortless custom dashboards, admin themes and pages CWE-94 8.8 High 2025-05-15
CVE-2025-1309 UiPress lite | Effortless custom dashboards, admin themes and pages <= 3.5.04 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update — UiPress lite | Effortless custom dashboards, admin themes and pages CWE-862 8.8 High 2025-03-07

This page lists every published CVE security advisory associated with admintwentytwenty. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.