Medium 6.5 Unfixed
2026-04-08≤ 1.3.14
CVE-2026-39708
Minimum safe version
1.3.5
Update to 1.3.5 or later to address 3 fixable vulnerabilities
CVE-2026-39708
CVE-2025-58196
UiCore Elements <= 1.3.0 - Missing Authorization to Unauthenticated Arbitrary File Read
WordPress UiCore Elements Plugin <= 1.0.16 is vulnerable to Cross Site Scripting (XSS)