Flatsome vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

FL

Product

Flatsome

by ux-themes · last CVE Jul 13, 2026

10

CVEs

0

On KEV

7.5

Max CVSS

0

New 30D

Vulnerabilities10 In the news0 Timeline

Severity mix

Critical 0High 2Medium 8Low 0

Severity

All severities10 Critical0 High2 Medium8 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Flatsome to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-57729	7.5	0%	Jul 13	WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability Affected: through 3.20.5
CVE-2026-57728	7.1	0%	Jul 13	WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 3.20.5
CVE-2026-57731	6.5	0%	Jul 2	WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability Affected: through 3.20.5
CVE-2026-28083	6.5	0%	Feb 26	WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability Affected: through 3.20.5
CVE-2025-8684	6.4	0%	Sep 5	Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 3.20.0
CVE-2024-5156	6.4	0%	Jun 20	Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Affected: through 3.18.7
CVE-2023-28994	6.1	0%	Aug 23	WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) Affected: through 3.16.8
CVE-2024-5346	5.4	0%	Jun 22	Flatsome \| Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes Affected: through 3.18.7
CVE-2026-31915	5.3	0%	Mar 13	WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability Affected: through 3.19.6
CVE-2026-57730	4.3	0%	Jul 2	WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability Affected: through 3.20.5