UX
Vendor
ux-themes
11
CVEs
0
On KEV
0
New 30D
Products
FL7.5
Flatsome
ux-themes
10 CVEs0 on KEV0 new
FM9.8
Flatsome | Multi-Purpose Responsive WooCommerce Theme
UX-themes
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-57729 | FL Flatsome UX-themes | 7.5 | Jul 13 | WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability |
| CVE-2026-57728 | FL Flatsome UX-themes | 7.1 | Jul 13 | WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability |
| CVE-2026-57731 | FL Flatsome UX-themes | 6.5 | Jul 2 | WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability |
| CVE-2026-57730 | FL Flatsome UX-themes | 4.3 | Jul 2 | WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability |
| CVE-2026-31915 | FL Flatsome UX-themes | 5.3 | Mar 13 | WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability |
| CVE-2026-28083 | FL Flatsome UX-themes | 6.5 | Feb 26 | WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability |
| CVE-2025-8684 | FL Flatsome ux-themes | 6.4 | Sep 5 | Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2024-5346 | FL Flatsome UX-themes | 5.4 | Jun 22 | Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes |
| CVE-2024-5156 | FL Flatsome UX-themes | 6.4 | Jun 20 | Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode |
| CVE-2023-40555 | FM Flatsome | Multi-Purpose Responsive WooCommerce Theme UX-themes | 9.8 | Dec 20 | WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection |
| CVE-2023-28994 | FL Flatsome UX-themes | 6.1 | Aug 23 | WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) |