Themesflat Addons For Elementor — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in Themesflat Addons For Elementor, with AI-generated Chinese analysis, references, and POCs.

Vendor: Themesflat

CVE ID	Title	CVSS	Severity	Published
CVE-2025-3275	Themesflat Addons For Elementor <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2025-04-19
CVE-2024-12205	Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2025-01-08
CVE-2024-8516	Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure CWE-200	4.3	Medium	2024-09-25
CVE-2024-8515	Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting CWE-79	6.4	Medium	2024-09-25
CVE-2024-4458	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLs CWE-79	6.4	Medium	2024-06-06
CVE-2024-4212	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets CWE-79	6.4	Medium	2024-06-06
CVE-2024-4459	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles CWE-87	6.4	Medium	2024-06-06
CVE-2024-2922	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tags CWE-79	6.4	Medium	2024-06-06
CVE-2024-35666	WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability CWE-79	6.5	Medium	2024-06-04
CVE-2023-37390	WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection CWE-502	8.3	High	2023-12-19

All 10 known CVE vulnerabilities affecting Themesflat Addons For Elementor with full Chinese analysis, references, and POCs where available.