cve.bz

ux-themes flatsome vulnerabilities in 2026, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 6.4CVE-2026-18742EPSS 0.2%

    The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via 'data-text-sec', 'data-title', and 'title' Attributes via Custom HTML Block in all versions up to, and including, 3.20.12 due to insufficient input sanitizat…

  2. 7.5CVE-2026-57729EPSS 0.4%

    Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.20.5.

  3. 7.1CVE-2026-57728EPSS 0.3%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: from n/a through <= 3.20.5.

  4. 6.5CVE-2026-57731EPSS 0.3%

    Contributor Broken Access Control in Flatsome <= 3.20.5 versions.

  5. 4.3CVE-2026-57730EPSS 0.3%

    Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.

  6. 5.3CVE-2026-31915EPSS 0.3%

    Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.

  7. 6.5CVE-2026-28083EPSS 0.2%

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.5.