themesflat records

11 published records for vendor themesflat.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 27.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-37390No exploit	WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injectionthemesflat · themesflat addons for elementor · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.8%	Dec 19, 2023
21Monitor	CVE-2024-8515No exploit	Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.5%	Sep 25, 2024
21Monitor	CVE-2024-4212No exploit	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgetsthemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.4%	Jun 6, 2024
21Monitor	CVE-2024-4458No exploit	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLsthemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.3%	Jun 6, 2024
21Monitor	CVE-2024-4459No exploit	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titlesthemesflat · themesflat addons for elementor · CWE-87 XSS	Medium5.4	—	0.3%	Jun 6, 2024
21Monitor	CVE-2024-2922No exploit	Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tagsthemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.3%	Jun 6, 2024
21Monitor	CVE-2024-53796No exploit	WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerabilitythemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.3%	Dec 6, 2024
21Monitor	CVE-2024-12205No exploit	Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scriptingthemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.3%	Jan 8, 2025
21Monitor	CVE-2024-49310No exploit	WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerabilitythemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.3%	Oct 17, 2024
21Monitor	CVE-2024-35666No exploit	WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerabilitythemesflat · themesflat addons for elementor · CWE-79 XSS	Medium5.4	—	0.2%	Jun 4, 2024
17Monitor	CVE-2024-8516No exploit	Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposurethemesflat · themesflat addons for elementor · CWE-200 Info leak	Medium4.3	—	0.4%	Sep 25, 2024

CVE-2023-37390
39Monitor
WordPress Themesflat Addons For Elementor Plugin <= 2.0.0 is vulnerable to PHP Object Injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Deserialization
themesflat · themesflat addons for elementorDec 19, 2023
CVE-2024-8515
21Monitor
Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorSep 25, 2024
CVE-2024-4212
21Monitor
Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting in Multiple Widgets
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorJun 6, 2024
CVE-2024-4458
21Monitor
Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via URLs
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorJun 6, 2024
CVE-2024-4459
21Monitor
Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Titles
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorJun 6, 2024
CVE-2024-2922
21Monitor
Themesflat Addons For Elementor <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Widget Tags
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorJun 6, 2024
CVE-2024-53796
21Monitor
WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorDec 6, 2024
CVE-2024-12205
21Monitor
Themesflat Addons For Elementor <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorJan 8, 2025
CVE-2024-49310
21Monitor
WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorOct 17, 2024
CVE-2024-35666
21Monitor
WordPress Themesflat Addons For Elementor plugin <= 2.1.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
themesflat · themesflat addons for elementorJun 4, 2024
CVE-2024-8516
17Monitor
Themesflat Addons For Elementor <= 2.2.1 - Authenticated (Contributor+) Information Exposure
MediumCVSS 4.3No exploitEPSS 0%
- Info leak
themesflat · themesflat addons for elementorSep 25, 2024