Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: uicore Clear all filters
TI-2026-28677 CVE-2026-39708 · GHSA-v5fx-2c92-mwpw

WordPress UiCore Elements plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UiCore UiCore Elements uicore-elements allows Stored XSS.This issue affects UiCore Elements: from n/a through 1.3.17.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00135 Published 2026-04-08 No fix listed CWE-79
TI-2025-36001 CVE-2025-58196 · GHSA-3cwh-vw96-5frc

WordPress UiCore Elements Plugin <= 1.3.4 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in uicore UiCore Elements uicore-elements allows Stored XSS.This issue affects UiCore Elements: from n/a through <= 1.3.4…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00169 Published 2025-08-27 No fix listed CWE-79
TI-2025-00893 CVE-2025-1054 · GHSA-h3j2-jhfw-78g2

Cross-site scripting in UiCore Elements – Free widgets and templates for Elementor

Priority LOW 28

The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the UI Counter, UI Icon Box, UI Testimonial Slider, UI Testimonial Grid, and UI Testimonial…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00252 Published 2025-04-23 No fix listed CWE-79