Uicore vulnerabilities

Products

• Elements 2
• Elements – Free Widgets And Templates For Elementor 2

Newest

• uicore elements WordPress UiCore Elements plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability CVE-2026-39708 6.5 MediumApril 8, 2026
• uicore elements WordPress UiCore Elements Plugin <= 1.3.4 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58196 6.5 MediumAugust 27, 2025
• uicore elements – free widgets and templates for elementor UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read CVE-2025-6253 7.5 HighAugust 12, 2025
• uicore elements – free widgets and templates for elementor UiCore Elements – Free Elementor widgets and templates <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets CVE-2025-1054 6.4 MediumApril 23, 2025