Pricing
Case studies
Login
Start trial
Flatsome
EPC
Developer
N/A
Latest version
N/A
Downloads
N/A
Last updated
WordPress Theme
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
5 fixed
2 Mitigation rules
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 3.20.0
Sep 4, 2025
Authenticated Stored Cross-Site Scripting via Shortcodes vulnerability
<= 3.18.7
Jun 21, 2024
Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability
<= 3.18.7
Jun 20, 2024
Unauthenticated PHP Object Injection vulnerability
<= 3.17.5
Sep 6, 2023
Reflected Cross Site Scripting (XSS) vulnerability
<= 3.16.8
May 9, 2023