Lucene search
K

36 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:16 p.m.5 views

CVE-2026-31915

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through = 3.19.6...

5.3CVSS5.8AI score0.00242EPSS
Exploits0References1
EUVD
EUVD
added 2026/03/13 9:31 p.m.7 views

EUVD-2026-11788

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through = 3.19.6...

5.3CVSS5.8AI score0.00242EPSS
Exploits0References2
NVD
NVD
added 2026/03/13 7:54 p.m.3 views

CVE-2026-31915

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through = 3.19.6...

5.3CVSS0.00242EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/13 11:41 a.m.2 views

CVE-2026-31915

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through = 3.19.6...

5.8AI score0.00242EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/03/13 11:41 a.m.26 views

CVE-2026-31915 WordPress Flatsome theme <= 3.19.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through = 3.19.6...

5.3CVSS0.00242EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/03/13 12:0 a.m.4 views

PT-2026-25170

CVE-2026-31915 Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome… https://t.co/9ol4kqpWAq...

5.3CVSS5.8AI score0.00242EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/27 10:14 a.m.6 views

CVE-2026-28083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS5.8AI score0.0013EPSS
Exploits0References1
EUVD
EUVD
added 2026/02/26 9:30 a.m.7 views

EUVD-2026-8843

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.1...

6.5CVSS5.3AI score0.0013EPSS
Exploits0References2
NVD
NVD
added 2026/02/26 9:16 a.m.2 views

CVE-2026-28083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS0.0013EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/26 8:33 a.m.17 views

CVE-2026-28083 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS0.0013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/26 8:33 a.m.4 views

CVE-2026-28083

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.1...

6.5CVSS5.3AI score0.0013EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/02/26 8:33 a.m.3 views

CVE-2026-28083 WordPress Flatsome theme <= 3.20.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.5...

6.5CVSS5.2AI score0.0013EPSS
Exploits0References1
CVE
CVE
added 2026/02/26 8:33 a.m.15 views

CVE-2026-28083

The CVE-2026-28083 entry concerns the UX-themes Flatsome WordPress theme with a Stored XSS vulnerability caused by improper neutralization of input during web page generation. Affected versions are Flatsome for WordPress up to 3.20.5 (and variants noted in other records as up to 3.20.1); the unde...

6.5CVSS5.8AI score0.0013EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.6 views

PT-2026-22132

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in UX-themes Flatsome flatsome allows Stored XSS.This issue affects Flatsome: from n/a through = 3.20.1...

5.3AI score0.0013EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/01/09 8:56 a.m.8 views

CVE-2023-40555

Deserialization of Untrusted Data vulnerability in UX-themes Flatsome | Multi-Purpose Responsive WooCommerce Theme.This issue affects Flatsome | Multi-Purpose Responsive WooCommerce Theme: from n/a through 3.17.5...

9.8CVSS8.6AI score0.0049EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2024-46571

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00257EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-27000

Malicious code in bioql PyPI...

6.4CVSS6.4AI score0.0018EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2024-46407

Malicious code in bioql PyPI...

6.4CVSS6.6AI score0.00267EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/09/07 4:20 a.m.9 views

CVE-2025-8684

The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS5.1AI score0.0018EPSS
Exploits0References1
NVD
NVD
added 2025/09/05 4:15 a.m.2 views

CVE-2025-8684

The Flatsome Theme for WordPress is vulnerable to Stored Cross-Site Scripting via the theme's shortcodes in all versions up to, and including, 3.20.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with...

6.4CVSS0.0018EPSS
Exploits0References2
Rows per page
Query Builder