Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This issue affects themes…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00162 · Published 2026-04-08 · No fix listed CWE-79
Priority MEDIUM 49
Deserialization of Untrusted Data vulnerability in themesflat Themesflat Elementor themesflat-elementor allows Object Injection.This issue affects Themesflat Elementor: from n/a through <= 1.0.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00446 · Published 2026-02-20 · No fix listed CWE-502
Priority MEDIUM 43
Deserialization of Untrusted Data vulnerability in themesflat TF Woo Product Grid Addon For Elementor tf-woo-product-grid allows Object Injection.This issue affects TF Woo Product Grid Addon For Elementor: from n/a throu…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00489 · Published 2025-10-22 · No fix listed CWE-502
Priority LOW 28
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider widget in all versions up to, and including, 2.2.5 due to insufficient input sanitization and outp…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00315 · Published 2025-04-19 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This issue affects themes…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00263 · Published 2025-03-31 · No fix listed CWE-79
Priority LOW 28
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the TF E Slider Widget in all versions up to, and including, 2.2.4 due to insufficient input sanitization and outp…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.0032 · Published 2025-01-08 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows DOM-Based XSS.This issue affects the…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00317 · Published 2024-12-06 · No fix listed CWE-79
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This issue affects themes…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00276 · Published 2024-10-17 · No fix listed CWE-79
Priority LOW 20
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.2.1 via the render() function.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.0044 · Published 2024-09-25 · No fix listed CWE-200
Priority LOW 29
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like 'TF E Slider Widget', 'TF Video Widget', 'TF Team Widget' and more in all versions up to, and…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00463 · Published 2024-09-25 · No fix listed CWE-79
Priority LOW 28
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting in several widgets via URL parameters in all versions up to, and including, 2.1.2 due to insufficient input sanitizati…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00342 · Published 2024-06-06 · No fix listed CWE-79
Priority LOW 29
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's TF Group Image, TF Nav Menu, TF Posts, TF Woo Product Grid, TF Accordion, and TF Image Box widgets in…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00425 · Published 2024-06-06 · No fix listed CWE-79
Priority LOW 28
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's widget's titles in all versions up to, and including, 2.1.2 due to insufficient input sanitization an…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00342 · Published 2024-06-06 · No fix listed CWE-87
Priority LOW 28
The Themesflat Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via widget tags in all versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping…
CVSS 3.1MEDIUM 6.4· Network · Low privileges · No interaction · EPSS 0.00333 · Published 2024-06-06 · No fix listed CWE-79
Priority LOW 28
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Themesflat Themesflat Addons For Elementor allows Stored XSS.This issue affects Themesflat Addons For Elementor…
CVSS 3.1MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00237 · Published 2024-06-04 · No fix listed CWE-79
Priority MEDIUM 43
Deserialization of Untrusted Data vulnerability in Themesflat Themesflat Addons For Elementor.This issue affects Themesflat Addons For Elementor: from n/a through 2.0.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00769 · Published 2023-12-19 · No fix listed CWE-502