WordPress Flatsome Vulnerabilities

Wordpress Flatsome vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

14 November 2026

Authorization Bypass in Flatsome WordPress Theme by UX Themes
CVE-2026-117490
WordPressFlatsome👾🟡
Exposed AJAX Action in Flatsome Theme Allows Disclosure of Unpublished Content
CVE-2026-117487
WordPressFlatsome👾🟡

13 July 2026

Access Control Flaw in UX-themes Flatsome Theme
CVE-2026-57729
WordPressFlatsome7.5HIGH
Cross-site Scripting Vulnerability in UX-themes Flatsome Theme
CVE-2026-57728
WordPressFlatsome7.1HIGH

2 July 2026

13 March 2026

Access Control Vulnerability in UX-themes Flatsome Theme
CVE-2026-31915
WordPressFlatsome5.3MEDIUM

26 February 2026

Cross-site Scripting Vulnerability in Flatsome Theme by UX-themes
CVE-2026-28083
WordPressFlatsome6.5MEDIUM

5 September 2025

Stored Cross-Site Scripting in Flatsome Theme for WordPress
CVE-2025-8684
WordPressFlatsome6.4MEDIUM

22 June 2024

Flatsome theme vulnerable to Stored Cross-Site Scripting
CVE-2024-5346
WordPressFlatsome6.4MEDIUM

20 June 2024

Stored Cross-Site Scripting Vulnerability in Flatsome Theme Affects User Supplied Attributes
CVE-2024-5156
WordPressFlatsome6.4MEDIUM

20 December 2023

WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection
CVE-2023-40555
WordPressFlatsome | Multi-purpo...8.3HIGH

23 August 2023

WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-28994
WordPressFlatsome7.1HIGH