CVE-2026-109385

The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actionssavebuilderdataelements...settingsslotNlinkurl' parameter in all versions up to, and including, 5.3.0 due to insufficient input...

EUVD-2026-111738

The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actionssavebuilderdataelements...settingsslotNlinkurl' parameter in all versions up to, and including, 5.3.0 due to insufficient input...

CVE-2026-109385 UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL

The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actionssavebuilderdataelements...settingsslotNlinkurl' parameter in all versions up to, and including, 5.3.0 due to insufficient input...

CVE-2026-109385

The UiChemy WordPress plugin (versions up to and including 5.3.0 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping within the actions[save_builder][data][elements][...][settings][slot_{N}_link][url] parameter. An authentic...

PT-2026-127863

The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actionssave builderdataelements...settingsslot N linkurl' parameter in all versions up to, and including, 5.3.0 due to insufficient inpu...

WordPress UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by Wordfence PRISM in WordPress Plugin UiChemy versions = 5.3.0...

WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Jitlada in WordPress Plugin UiChemy versions = 4.4.2...

CVE-2025-69362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through = 4.4.2...

CVE-2025-69362

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through = 4.4.2...

CVE-2025-69362

CVE-2025-69362 : POSIMYTH UiChemy (UiChemy) WordPress plugin is affected up through version 4.4.2 with a stored XSS risk caused by improper input neutralization during web page generation. The CVSS 3.1 base metrics indicate Network access, low attack complexity, required privileges low, and user ...

CVE-2025-69362 WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through = 4.4.2...

CVE-2025-69362 WordPress UiChemy plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through = 4.4.2...

CVE-2025-69362: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in POSIMYTH UiChemy uichemy allows Stored XSS.This issue affects UiChemy: from n/a through = 4.4.2...

WordPress plugin UiChemy has a security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...

PT-2026-1489

Name of the Vulnerable Software and Affected Versions POSIMYTH UiChemy versions through 4.4.2 Description The software contains a flaw related to improper input handling during web page generation, which allows for Stored Cross-site Scripting XSS. This means malicious scripts can be stored on the...

CVE-2025-62013

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through = 4.0.0...

EUVD-2025-35391

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through = 4.0.0...

CVE-2025-62013

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through = 4.0.0...

CVE-2025-62013 WordPress UiChemy plugin <= 4.0.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through = 4.0.0...

CVE-2025-62013

CVE-2025-62013 refers to a Missing Authorization (broken access control) vulnerability in the UiChemy WordPress plugin (UiChemy — Figma Converter for Elementor, Gutenberg and Bricks) up to version 4.0.0. The advisory scope indicates affected software is UiChemy: from n/a through