UX-themes vulnerabilities
Published CVEs affecting UX-themes products: 6 record(s), with severity, exploitation and fixes.
CVE-2026-57729
High · 7.5
CWE-862 Jul 13, 2026
WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.20.5.
CVE-2026-57728
High · 7.1
CWE-79 Jul 13, 2026
WordPress Flatsome theme <= 3.20.5 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Reflected XSS.This issue affects Flatsome: from n/a through <= 3.20.5.
CVE-2026-57731
Medium · 6.5
CWE-862 Jul 2, 2026
WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability
Contributor Broken Access Control in Flatsome <= 3.20.5 versions.
CVE-2026-57730
Medium · 4.3
CWE-862 Jul 2, 2026
WordPress Flatsome theme <= 3.20.5 - Broken Access Control vulnerability
Subscriber Broken Access Control in Flatsome <= 3.20.5 versions.
CVE-2026-31915
Medium · 5.3
CWE-862 Mar 13, 2026
WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.
CVE-2026-28083
Medium · 6.5
CWE-79 Feb 26, 2026
WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through <= 3.20.5.