Log in Start free

UX-themes

Products

ProductCVEsExploitedLatest
Flatsome10–Jul 13, 2026
Flatsome | Multi-Purpose Responsive WooCommerce Theme1–Dec 20, 2023

Exploited and recent CVEs

  • CVE-2026-57729 High 7.5 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability 0.4%
  • CVE-2026-57728 High 7.1 WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2026-57731 Medium 6.5 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-57730 Medium 4.3 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-31915 Medium 5.3 WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-28083 Medium 6.5 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2025-8684 Medium 6.4 Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.2%
  • CVE-2024-5346 Medium 6.4 Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes 0.3%
  • CVE-2024-5156 Medium 6.4 Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode 0.3%
  • CVE-2023-40555 High 8.3 WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection 0.6%
  • CVE-2023-28994 High 7.1 WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) 0.4%