ux-themes flatsome vulnerabilities, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 6.4CVE-2026-18742EPSS 0.2%
The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block in all versions up to, and including, 3.20.12 due to insufficient input sanitizat…
- 7.5CVE-2026-57729EPSS 0.4%
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.20.5.
- 7.1CVE-2026-57728EPSS 0.3%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: from n/a through <= 3.20.5.
- 6.5CVE-2026-57731EPSS 0.3%
Contributor Broken Access Control in Flatsome <= 3.20.5 versions.
- 4.3CVE-2026-57730EPSS 0.3%
Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.
- 5.3CVE-2026-31915EPSS 0.3%
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.
- 6.5CVE-2026-28083EPSS 0.2%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.5.
- 6.4CVE-2025-8684EPSS 0.2%
The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping on user supplied attributes. T…
- 6.4CVE-2024-5156EPSS 0.3%
The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.18.7 due to insufficient input sanitization and output escaping on user supplied attributes…