Skip to content
OpenAdvisories

Vendor

UX-themes

11 known vulnerabilities.

Products

Flatsome 10 Flatsome | Multi-Purpose Responsive WooCommerce Theme 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-57731

    WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

    Contributor Broken Access Control in Flatsome <= 3.20.5 versions.

    UX-themes Flatsome
  • Medium 4.3
    CVE-2026-57730

    WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

    Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.

    UX-themes Flatsome
  • Medium 5.3
    CVE-2026-31915

    WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability

    Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.

    UX-themes Flatsome
  • Medium 6.5
    CVE-2026-28083

    WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.5.

    UX-themes Flatsome
  • Medium 6.4
    CVE-2025-8684

    Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possibl…

    UX-themes Flatsome Web / CMS
  • Medium 6.4
    CVE-2024-5346

    Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes

    The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the UX Countdown, Video Button, UX Video, UX Slider, UX Sidebar, and UX Payment Icons shortcodes in all versions up to, and including, 3.18.7 due to insufficient input sanitizat…

    UX-themes Flatsome Web / CMS
  • Medium 6.4
    CVE-2024-5156

    Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.18.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it poss…

    UX-themes Flatsome Web / CMS