What’s Vulnerable › Products

UX-themes Flatsome vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your UX-themes Flatsome version is affected

Latest UX-themes Flatsome vulnerabilities

• CVE-2026-57729 — WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability (CVSS 7.5)
• CVE-2026-57728 — WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2026-57731 — WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability (CVSS 6.5)
• CVE-2026-57730 — WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2026-31915 — WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-28083 — WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2025-8684 — Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
• CVE-2024-5346 — Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes (CVSS 5.4)
• CVE-2024-5156 — Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode (CVSS 6.4)
• CVE-2023-40555 — WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection (CVSS 9.8)
• CVE-2023-28994 — WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)