Log in Start free

Themesflat

Products

ProductCVEsExploitedLatest
Themesflat Addons For Elementor14–Apr 8, 2026
TF Woo Product Grid Addon For Elementor1–Oct 22, 2025
Themesflat Elementor1–Feb 20, 2026

Exploited and recent CVEs

  • CVE-2026-39500 Medium 6.5 WordPress themesflat-addons-for-elementor plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-69382 Critical 9.8 WordPress Themesflat Elementor plugin <= 1.0.1 - PHP Object Injection vulnerability 0.4%
  • CVE-2025-59007 Critical 9.8 WordPress TF Woo Product Grid Addon For Elementor Plugin <= 1.0.1 - Deserialization of untrusted data Vulnerability 0.5%
  • CVE-2025-3275 Medium 6.4 Themesflat Addons For Elementor <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2025-31567 Medium 6.5 WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-12205 Medium 6.4 Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.3%
  • CVE-2024-53796 Medium 6.5 WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-49310 Medium 6.5 WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-8516 Medium 4.3 Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure 0.4%
  • CVE-2024-8515 Medium 6.4 Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting 0.5%
  • CVE-2024-4458 Medium 6.4 Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLs 0.3%
  • CVE-2024-4212 Medium 6.4 Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets 0.4%
  • CVE-2024-4459 Medium 6.4 Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles 0.3%
  • CVE-2024-2922 Medium 6.4 Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tags 0.3%
  • CVE-2024-35666 Medium 6.5 WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2023-37390 High 8.3 WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection 0.8%