Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

UX-themes — Vulnerabilities & Security Advisories 11

Browse all 11 CVE security advisories affecting UX-themes. AI-powered Chinese analysis, POCs, and references for each vulnerability.

UX-themes is a WordPress theme provider offering pre-designed templates for websites. Historically, the themes have been vulnerable to multiple security issues, including cross-site scripting (XSS), remote code execution (RCE), and privilege escalation vulnerabilities. These flaws often stem from insufficient input validation and improper permission checks. With 7 CVEs on record, the themes have faced repeated security concerns, though no major public incidents have been widely reported. The recurring nature of these vulnerabilities suggests ongoing challenges in secure coding practices, potentially exposing users to significant risks if not properly maintained and updated.

CVE ID Title CVSS Severity Published
CVE-2026-57728 WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability — Flatsome CWE-79 7.1 High 2026-07-13
CVE-2026-57729 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability — Flatsome CWE-862 7.5 High 2026-07-13
CVE-2026-57731 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability — Flatsome CWE-862 6.5 Medium 2026-07-02
CVE-2026-57730 WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability — Flatsome CWE-862 4.3 Medium 2026-07-02
CVE-2026-31915 WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability — Flatsome CWE-862 5.3 Medium 2026-03-13
CVE-2026-28083 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability — Flatsome CWE-79 6.5 Medium 2026-02-26
CVE-2025-8684 Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Flatsome CWE-79 6.4 Medium 2025-09-05
CVE-2024-5346 Flatsome | Multi-Purpose Responsive WooCommerce Theme <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple Shortcodes — Flatsome CWE-79 6.4 Medium 2024-06-22
CVE-2024-5156 Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — Flatsome CWE-79 6.4 Medium 2024-06-20
CVE-2023-40555 WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection — Flatsome | Multi-Purpose Responsive WooCommerce Theme CWE-502 8.3 High 2023-12-20
CVE-2023-28994 WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS) — Flatsome CWE-79 7.1 High 2023-08-23

This page lists every published CVE security advisory associated with UX-themes. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.