themesflat-addons-for-elementor vulnerabilities | LiveThreat CVE Feed

Product

themesflat-addons-for-elementor

by themesflat · last CVE Apr 8, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities14 In the news0 Timeline

Severity mix

Critical 1High 0Medium 13Low 0

Severity

All severities14 Critical1 High0 Medium13 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add themesflat-addons-for-elementor to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-39500	6.5	0%	Apr 8	WordPress themesflat-addons-for-elementor plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability Affected: through 2.3.2
CVE-2025-31567	6.5	0%	Mar 31	WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability Affected: through 2.3.1
CVE-2025-3275	6.4	0%	Apr 19	Themesflat Addons For Elementor <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.2.5
CVE-2024-12205	5.4	0%	Jan 8	Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.2.4
CVE-2024-53796	5.4	0%	Dec 6	WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability Affected: through 2.2.2
CVE-2024-49310	5.4	0%	Oct 17	WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability Affected: through 2.2.0
CVE-2024-8515	5.4	0%	Sep 25	Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: through 2.2.1
CVE-2024-4458	5.4	0%	Jun 6	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLs Affected: through 2.1.2
CVE-2024-4212	5.4	0%	Jun 6	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets Affected: through 2.1.2
CVE-2024-4459	5.4	0%	Jun 6	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles Affected: through 2.1.2
CVE-2024-2922	5.4	0%	Jun 6	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tags Affected: through 2.1.2
CVE-2024-35666	5.4	0%	Jun 4	WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability Affected: through 2.1.2
CVE-2024-8516	4.3	0%	Sep 25	Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure Affected: through 2.2.1