What’s Vulnerable › Products

Themesflat Addons For Elementor vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Themesflat Addons For Elementor version is affected

Latest Themesflat Addons For Elementor vulnerabilities

• CVE-2026-39500 — WordPress themesflat-addons-for-elementor plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-3275 — Themesflat Addons For Elementor <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4)
• CVE-2025-31567 — WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2024-12205 — Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-53796 — WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-49310 — WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-8516 — Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure (CVSS 4.3)
• CVE-2024-8515 — Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 5.4)
• CVE-2024-4459 — Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles (CVSS 5.4)
• CVE-2024-4458 — Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLs (CVSS 5.4)
• CVE-2024-4212 — Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets (CVSS 5.4)
• CVE-2024-2922 — Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tags (CVSS 5.4)
• CVE-2024-35666 — WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2023-37390 — WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection (CVSS 9.8)