CVE-2026-57731

The Flatsome plugin version 3.20.5 and earlier contains a broken access control vulnerability for contributors. A user with the contributor role can gain unauthorized access to functions or data that should be restricted.

The risk involves privilege escalation by contributors, potentially leading to unauthorized content modifications, data theft, or site takeover.

Immediately update the Flatsome plugin to a version later than 3.20.5, which includes a fix for this vulnerability.