Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Flatsome Theme: Incorrect Access Control Security Levels

CVE-2026-31915 · published 7 months ago
Summary

The Flatsome theme has a security issue that allows unauthorized access to certain features. This affects all versions up to 3.19.6, so it's essential to update to a newer version to prevent potential security risks. Update Flatsome to a version higher than 3.19.6 to fix this issue.

Original advisory text
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.
Missing Authorization vulnerability in UX-themes Flatsome flatsome allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Flatsome: from n/a through <= 3.19.6.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published13 Mar 2026
Updated30 Oct 2026
First seen29 Apr 2026
Sources
CVE-2026-31915 · NVD
Track software like this
Free during beta