Vulnerabilities / UiChemy
UiChemy vulnerabilities
Advisories WPSec published for UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks. Other sources may list more. Its attack surface: UiChemy on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-21 | WPSEC-2026-1320 | UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Composer Widget Slot Link Settings | Medium 6.4 | 5.4.0 |
| 2026-10-01 | WPSEC-2026-0127 | UiChemy <= 5.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Import | Medium 6.4 | 5.2.3 |
| 2026-10-01 | WPSEC-2026-0126 | UiChemy <= 5.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Composer Section Code | Medium 6.4 | 5.2.3 |
License: CC BY 4.0