Log in Start free

UiCore

Products

ProductCVEsExploitedLatest
UiCore Elements2–Apr 8, 2026
UiCore Elements – Free widgets and templates for Elementor2–Aug 12, 2025

Exploited and recent CVEs

  • CVE-2026-39708 Medium 6.5 WordPress UiCore Elements plugin <= 1.3.17 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2025-58196 Medium 6.5 WordPress UiCore Elements Plugin <= 1.3.4 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2025-6253 High 7.5 UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read 0.4%
  • CVE-2025-1054 Medium 6.4 UiCore Elements – Free Elementor widgets and templates <= 1.0.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Widgets 0.3%