Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Flatsome — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Flatsome, with AI-generated Chinese analysis, references, and POCs.

Vendor: UX-themes

CVE ID Title CVSS Severity Published
CVE-2026-57728 WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability CWE-79 7.1 High 2026-07-13
CVE-2026-57729 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability CWE-862 7.5 High 2026-07-13
CVE-2026-57731 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability CWE-862 6.5 Medium 2026-07-02
CVE-2026-57730 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability CWE-862 4.3 Medium 2026-07-02
CVE-2026-31915 WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability CWE-862 5.3 Medium 2026-03-13
CVE-2026-28083 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability CWE-79 6.5 Medium 2026-02-26
CVE-2025-8684 Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2025-09-05
CVE-2024-5346 Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes CWE-79 6.4 Medium 2024-06-22
CVE-2024-5156 Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CWE-79 6.4 Medium 2024-06-20
CVE-2023-28994 WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) CWE-79 7.1 High 2023-08-23

All 10 known CVE vulnerabilities affecting Flatsome with full Chinese analysis, references, and POCs where available.