Vulnerabilities in UiCore

4 results

CVE-2025-6253HIGHUiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File ReadEPSS 0.4%CVE-2025-1054MEDIUMUiCore Elements – Free Elementor widgets and templates <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple WidgetsEPSS 0.3%CVE-2025-58196MEDIUMWordPress UiCore Elements Plugin <= 1.3.4 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%CVE-2026-39708MEDIUMWordPress UiCore Elements plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.1%