CVE-2026-57729

The CVE-2026-57729 entry details a Missing Authorization (Broken Access Control) flaw in the UX-themes Flatsome WordPress theme for versions up to and including 3.20.5. The underlying issue is an improperly configured access control that can expose data with no privileges required (attack vector:...

CVE-2026-57730

Subscriber Broken Access Control in Flatsome = 3.20.5 versions...

CVE-2026-31915

CVE-2026-31915 affects the WordPress Flatsome theme up to version 3.19.6, describing a Missing Authorization / Broken Access Control vulnerability due to incorrectly configured access control. Affected product/component: Flatsome theme. Root cause: misconfigured access control security levels. Im...