{"id":"CVE-2026-109385","kind":"vulnerability","aliases":["CVE-2026-109385"],"related":[],"title":"UiChemy WordPress plugin: stored XSS via builder link URL","description":"The UiChemy – Convert Figma, Prompts and AI Builds to Elementor, Gutenberg and Bricks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'actions[save_builder][data][elements][...][settings][slot_{N}_link][url]' parameter in all versions up to, and including, 5.3.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The injected javascript: payload fires on click rather than on page load, making exploitation contingent on a privileged user such as an Editor or Administrator clicking the attacker-crafted link while reviewing or previewing the Contributor's post.","summary":"The UiChemy WordPress plugin does not sanitize a link URL field saved from its page builder, so a contributor can store a javascript: link. When an editor or administrator clicks that link while reviewing the post, the attacker's script runs in their session.","severity":"medium","cvss":6.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["bricks","elementor","gutenberg","package","wordpress","wordpress-plugin"],"not_affected_if":["no-contributor-accounts","plugin-not-installed"],"how_to_check":"- Check whether the UiChemy plugin is installed and its version in the WordPress admin plugin list\n- Confirm the installed version against the vulnerable range: up to and including `5.3.0`","fix":null,"status":"open","published_at":"2026-10-28T07:16:44+00:00","first_seen_at":"2026-10-28T07:31:37+00:00","triaged_at":"2026-10-28T07:33:06+00:00","updated_at":"2026-10-28T07:33:06+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-28T07:33:06Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"UiChemy WordPress plugin: stored XSS via builder link URL","impact":"medium","summary":"The UiChemy WordPress plugin does not sanitize a link URL field saved from its page builder, so a contributor can store a javascript: link. When an editor or administrator clicks that link while reviewing the post, the attacker's script runs in their session.","category":"package","nicknames":[],"who_cares":["wordpress","wordpress-plugin","elementor","gutenberg","bricks"],"confidence":0.6,"needs_auth":"yes","worst_case":"Stored script runs in an editor or administrator's browser session","analyst_note":"Check the NVD entry or the plugin's changelog for a patched version after 5.3.0 and confirm the fix version.","how_to_check":"- Check whether the UiChemy plugin is installed and its version in the WordPress admin plugin list\n- Confirm the installed version against the vulnerable range: up to and including `5.3.0`","needs_analyst":true,"not_affected_if":["plugin-not-installed","no-contributor-accounts"],"who_is_affected":"Sites running the UiChemy plugin at version `5.3.0` or earlier that let contributor-level users create or edit content. Sites without the plugin, or where only trusted editors write content, have a lower exposure. The sources do not name a patched version.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000606,"input_tokens":3502,"output_tokens":512,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-109385':12A,15A '-2026':11A,14A '5.3.0':112C 'access':132C,148C 'action':94C 'administr':52B,176C 'ai':74C 'arbitrari':137C 'attack':61B,127C,180C 'attacker-craft':179C 'authent':126C 'brick':16B,80C 'build':75C 'builder':7A,39B,96C 'click':53B,158C,177C 'conting':166C 'contributor':42B,130C,188C 'contributor-level':129C 'convert':70C 'craft':181C 'cross':89C 'cross-sit':88C 'cve':10A,13A 'data':97C 'due':113C 'editor':50B,174C 'element':98C 'elementor':17B,77C 'escap':120C 'execut':144C 'exploit':165C 'field':34B 'figma':71C 'fire':156C 'gutenberg':18B,78C 'includ':111C 'inject':136C,150C,153C 'input':116C 'insuffici':115C 'javascript':46B,154C 'level':131C 'link':8A,32B,47B,55B,102C,182C 'load':163C 'make':122C,164C 'n':101C 'output':119C 'packag':19B 'page':38B,141C,151C,162C 'paramet':104C 'payload':155C 'plugin':3A,23B,27B,81C 'possibl':124C 'post':59B,190C 'preview':186C 'privileg':169C 'prompt':72C 'rather':159C 'review':57B,184C 'run':64B 'sanit':30B,117C 'save':35B,95C 'script':63B,91C,139C 'session':67B 'set':99C 'site':90C 'slot':100C 'store':4A,44B,87C 'uichemi':1A,25B,69C 'url':9A,33B,103C 'user':147C,170C 'version':107C 'via':6A,92C 'vulner':85C 'web':138C 'whenev':145C 'wordpress':2A,20B,22B,26B,83C 'wordpress-plugin':21B 'xss':5A","nicknames":[],"mitigations":[],"who_affected":"Sites running the UiChemy plugin at version `5.3.0` or earlier that let contributor-level users create or edit content. Sites without the plugin, or where only trusted editors write content, have a lower exposure. The sources do not name a patched version.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-28T07:16:44+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","cvss_by":"security@wordfence.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-109385","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-109385","severity":null,"published_at":"2026-10-28T07:16:44+00:00","modified_at":"2026-10-28T07:16:44+00:00","first_seen_at":"2026-10-28T07:31:37+00:00","fetched_at":"2026-10-28T07:31:37+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}