CVE-2026-109385

The UiChemy WordPress plugin (versions up to and including 5.3.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the actions[save_builder][data][elements][...][settings][slot_{N}_link][url] parameter. An authentic...

PT-2026-127863

The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actionssave builderdataelements...settingsslot N linkurl' parameter in all versions up to, and including, 5.3.0 due to insufficient inpu...