Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2026-109385EUVD-2026-111738GHSA-PRW3-6895-6MV7

UiChemy <= 5.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slot Link URL

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: partial

Summary

The UiChemy plugin for WordPress, which converts Figma designs, prompts, and AI builds into Elementor, Gutenberg, and Bricks layouts, is affected. An attacker with contributor-level access or higher can save malicious script code in a link field, which can run in a victim's browser when they click the link, potentially including editors or administrators reviewing the content.

Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.

Read the original description

The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actions[save_builder][data][elements][...][settings][slot_{N}_link][url]' parameter in all versions up to, and including, 5.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected javascript: payload fires on click rather than on page load, making exploitation contingent on a privileged user such as an Editor or Administrator clicking the attacker-crafted link while reviewing or previewing the Contributor's post.

Timeline

  1. CVE published
  2. First seen by cve.now
  3. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: partial

  4. Record last updated

Affected versions

  • posimyththemes UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks

    through 5.3.0

References 7

wordfence.com

plugins.trac.wordpress.org

wordpress.org