Ux-Themes

11 CVEs across 2 Ux-Themes products. Browse Ux-Themes vulnerabilities, severities, and proof-of-concept exploits.

Ux-Themes products with known CVEs

ProductCVEs
Flatsome10
Flatsome | Multi-Purpose Responsive Woocommerce Theme1
Ux-Themes CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-57729High7.52026-07-13Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F…
CVE-2026-57728High7.12026-07-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This iss…
CVE-2026-57731Medium6.52026-07-02Contributor Broken Access Control in Flatsome <= 3.20.5 versions.
CVE-2026-57730Medium4.32026-07-02Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.
CVE-2026-31915Medium5.32026-03-13Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects F…
CVE-2026-28083Medium6.52026-02-26Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue…
CVE-2025-8684Medium6.42025-09-05The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to in…
CVE-2024-5346Medium6.42024-06-22The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the UX Countdown, Video Button, UX Video, UX Slider, UX Sidebar, and UX Payme…
CVE-2024-5156Medium6.42024-06-20The Flatsome theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.18.7 due to…
CVE-2023-40555High8.32023-12-20Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose…
CVE-2023-28994High7.12023-08-23Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in UX-themes Flatsome plugin <= 3.16.8 versions.