UX-themes vulnerabilities

CVEs per yearBy the year they were published

1. 20232
2. 20242
3. 20251
4. 20266

Newest CVEs

• CVE-2026-57729

  WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

  UX-themes · Flatsome

  High7.5
• CVE-2026-57728

  WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability

  UX-themes · Flatsome

  High7.1
• CVE-2026-57731

  WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

  UX-themes · Flatsome

  Medium6.5
• CVE-2026-57730

  WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

  UX-themes · Flatsome

  Medium4.3
• CVE-2026-31915

  WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability

  UX-themes · Flatsome

  Medium5.3
• CVE-2026-28083

  WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

  UX-themes · Flatsome

  Medium6.5
• CVE-2025-8684

  Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  ux-themes · Flatsome

  Medium6.4
• CVE-2024-5346

  Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

  UX-themes · Flatsome

  Medium6.4
• CVE-2024-5156

  Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

  UX-themes · Flatsome

  Medium6.4
• CVE-2023-40555

  WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection

  UX-themes · Flatsome | Multi-Purpose Responsive WooCommerce Theme

  High8.3