Themesflat Themesflat Addons For Elementor

10 CVEs affecting Themesflat Themesflat Addons For Elementor. Latest disclosed: 2025-04-19. Critical: 0, High: 1.

Top CVEs affecting Themesflat Themesflat Addons For Elementor
CVESeverityScorePublishedSummary
CVE-2023-37390High8.32023-12-19Deserialization of Untrusted Data vulnerability in Themesflat Themesflat Addons For Elementor.This issue affects Themesflat Addons For Elementor: from n/a thro…
CVE-2024-35666Medium6.52024-06-04Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesflat Themesflat Addons For Elementor allows…
CVE-2025-3275Medium6.42025-04-19The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider widget in all versions up to, and inc…
CVE-2024-12205Medium6.42025-01-08The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and inc…
CVE-2024-8515Medium6.42024-09-25The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like 'TF E Slider Widget', 'TF Video…
CVE-2024-4458Medium6.42024-06-06The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in several widgets via URL parameters in all versions up…
CVE-2024-4212Medium6.42024-06-06The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TF Group Image, TF Nav Menu, TF Posts, T…
CVE-2024-4459Medium6.42024-06-06The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget's titles in all versions up to, a…
CVE-2024-2922Medium6.42024-06-06The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget tags in all versions up to, and including, 2.1…
CVE-2024-8516Medium4.32024-09-25The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render() fun…