Vendor

    UX-themes

    12 known vulnerabilities in products by UX-themes, 0 of them actively exploited (CISA KEV).

    Key figures

    12

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in UX-themes
    HighCVE-2026-57729

    WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

    		7.5
    CriticalCVE-2023-40555

    WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection

    also in 1 other product

    		8.3
    MediumCVE-2026-18742

    UX-themes Flatsome: Cross-site Scripting

    		6.4
    MediumCVE-2026-57731

    WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

    		6.5
    HighCVE-2026-57728

    WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability

    		7.1
    HighCVE-2023-28994

    WordPress Flatsome Theme <= 3.16.8 is vulnerable to Cross Site Scripting (XSS)

    also in 1 other product

    		7.1
    MediumCVE-2026-28083

    WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-31915

    WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-57730

    WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability

    		4.3
    MediumCVE-2025-8684

    Flatsome <= 3.20.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    		6.4
    MediumCVE-2024-5156

    Flatsome <= 3.18.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    		6.4
    MediumCVE-2024-5346

    UX-themes Flatsome: Cross-site Scripting

    also in 1 other product

    		6.4

    Products

    Products by UX-themes
    UX-themes Flatsome100