Approved changes feed: RSS · Atom

cpe:2.3:a:themesflat:themesflat-addons-for-elementor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorThemesflat (e99ff9f7-a508-5981-8813-590d3a87bf74)
ProductThemesflat Addons For Elementor (10eaeae4-1fff-52c1-8436-1fcb70577fa0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-39500 vulnerable 2026-06-08 08:01:16.602619 WordPress themesflat-addons-for-elementor plugin <= 2.3.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This issue affects themesflat-addons-for-elementor: from n/a through <= 2.3.2.
Published: 2026-04-08T08:30:12.864Z
Updated: 2026-04-29T09:52:01.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-31567 vulnerable 2026-06-08 07:18:58.144336 WordPress Themesflat Addons For Elementor plugin <= 2.3.1 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This issue affects themesflat-addons-for-elementor: from n/a through <= 2.3.1.
Published: 2025-03-31T12:55:19.760Z
Updated: 2026-04-28T16:12:09.091Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53796 vulnerable 2026-06-08 06:54:15.535601 WordPress Themesflat Addons For Elementor plugin <= 2.2.2 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows DOM-Based XSS.This issue affects themesflat-addons-for-elementor: from n/a through <= 2.2.2.
Published: 2024-12-06T13:07:35.205Z
Updated: 2026-05-12T23:19:55.131Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-49310 vulnerable 2026-06-08 06:50:13.427699 WordPress Themesflat Addons For Elementor plugin <= 2.2.0 - Cross Site Scripting (XSS) vulnerability
MEDIUM (6.5)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesflat themesflat-addons-for-elementor themesflat-addons-for-elementor allows Stored XSS.This issue affects themesflat-addons-for-elementor: from n/a through <= 2.2.0.
Published: 2024-10-17T18:26:12.639Z
Updated: 2026-04-28T16:10:25.065Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.