Bdthemes vulnerabilities

Products

• Element Pack 34
• Element Pack – Widgets, Templates & Addons For Elementor 29
• Prime Slider – Addons For Elementor 19
• Element Pack Elementor Addons 14
• Prime Slider 13
• Ultimate Store Kit Elementor Addons 13
• Element Pack Pro 4
• Ultimate Store Kit 4
• Zoloblocks 4
• Sigmaforms Pro – Ai Generated Forms 3
• Ultimate Store Kit – Addon For Woocommerce, Edd And Elementor 3
• Element Pack Addons For Elementor – Elementor Widgets, Elementor Templates, Elementor Addons 2
• Instant Image Generator 2
• Live Copy Paste For Elementor 2
• Prime Slider – Hero Slider, Carousel, Woocommerce & Post Slider Elementor Addons 2
• Ultimate Post Kit 2
• Ultimate Post Kit Addons For Elementor 2
• Utlimate Store Kit Elementor Addons 2

Newest

• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-119501 6.5 MediumNovember 7, 2026
• bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 4.0.1 - Broken Access Control vulnerability CVE-2026-119502 5.3 MediumNovember 7, 2026
• bdthemes prime slider – hero slider, carousel, woocommerce & post slider elementor addons Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape CVE-2026-111111 7.2 HighOctober 28, 2026
• bdthemes prime slider – addons for elementor WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability CVE-2026-109691 6.5 MediumOctober 13, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability CVE-2026-108478 6.5 MediumOctober 12, 2026
• bdthemes ultimate post kit WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability CVE-2026-105886 6.5 MediumOctober 8, 2026
• bdthemes prime slider – addons for elementor WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2026-105875 6.5 MediumOctober 7, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-105873 6.5 MediumOctober 7, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability CVE-2026-105871 6.5 MediumOctober 7, 2026
• bdthemes live copy paste for elementor WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability CVE-2026-93527 8.5 HighSeptember 23, 2026
• bdthemes element pack addons for elementor – elementor widgets, elementor templates, elementor addons, live copy paste for elementor – cross domain copy paste & page duplicator, pixel gallery addons for elementor +4 more +6 more Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API CVE-2026-92991 5.4 MediumSeptember 18, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability CVE-2026-66574 6.5 MediumSeptember 17, 2026
• bdthemes sigmaforms pro – ai generated forms SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field CVE-2026-78657 9.8 CriticalSeptember 2, 2026
• bdthemes sigmaforms pro – ai generated forms Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field CVE-2026-14494 9.8 CriticalAugust 29, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability CVE-2026-65502 5.3 MediumAugust 6, 2026
• bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability CVE-2026-25403 6.5 MediumAugust 6, 2026
• bdthemes element pack addons for elementor – elementor widgets, elementor templates, elementor addons Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection CVE-2026-0673 5.3 MediumAugust 6, 2026
• bdthemes element pack addons for elementor Element Pack Elementor Addons < 8.7.13 - Contributor+ DOM-Based Stored XSS via uikit Data Attributes CVE-2026-14817 6.8 MediumAugust 2, 2026
• bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability CVE-2026-65505 5.3 MediumJuly 23, 2026
• bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability CVE-2026-65503 6.5 MediumJuly 23, 2026
• bdthemes instant image generator WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability CVE-2026-57413 6.4 MediumJuly 13, 2026
• bdthemes live copy paste for elementor WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability CVE-2025-63079 4.3 MediumJune 26, 2026
• bdthemes sigmaforms pro – ai generated forms WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability CVE-2026-52705 9.0 CriticalJune 17, 2026
• bdthemes element pack pro WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability CVE-2026-40721 7.5 HighJune 17, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability CVE-2026-40745 7.6 HighApril 15, 2026
• bdthemes element pack – widgets, templates & addons for elementor Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget CVE-2026-4655 6.4 MediumApril 8, 2026
• bdthemes prime slider – addons for elementor Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter CVE-2026-4341 6.4 MediumApril 8, 2026
• bdthemes ultimate post kit WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability CVE-2026-24362 6.4 MediumMarch 25, 2026
• bdthemes element pack – widgets, templates & addons for elementor Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read CVE-2026-1793 6.5 MediumFebruary 15, 2026
• bdthemes element pack elementor addons WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-31413 4.3 MediumJanuary 22, 2026
• bdthemes spin wheel – interactive spinning wheel that offers coupons Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter CVE-2026-0808 5.3 MediumJanuary 17, 2026
• bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability CVE-2025-69336 4.3 MediumJanuary 6, 2026
• bdthemes prime slider – addons for elementor WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability CVE-2025-68500 4.9 MediumDecember 24, 2025
• bdthemes prime slider – addons for elementor Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery CVE-2025-14277 4.3 MediumDecember 18, 2025
• bdthemes element pack – widgets, templates & addons for elementor Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget CVE-2025-13196 5.4 MediumNovember 18, 2025
• bdthemes zoloblocks – gutenberg block editor plugin with advanced blocks, dynamic content, templates & patterns ZoloBlocks <= 2.3.11 - Missing Authorization to Unauthenticated Popup Enable/Disable CVE-2025-12134 5.3 MediumOctober 24, 2025
• bdthemes zoloblocks WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability CVE-2025-49903 5.3 MediumOctober 22, 2025
• bdthemes element pack – widgets, templates & addons for elementor Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery CVE-2025-11536 5.0 MediumOctober 20, 2025
• bdthemes zoloblocks – gutenberg block editor plugin with advanced blocks, dynamic content, templates & patterns ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-9075 6.4 MediumOctober 1, 2025
• bdthemes zoloblocks WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability CVE-2025-60161 5.4 MediumSeptember 26, 2025
• bdthemes ultimate store kit elementor addons WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerability CVE-2025-58017 6.5 MediumSeptember 22, 2025
• bdthemes zoloblocks WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerability CVE-2025-58230 6.5 MediumSeptember 22, 2025
• bdthemes zoloblocks WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability CVE-2025-53210 7.5 HighAugust 20, 2025
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content CVE-2025-8100 5.4 MediumAugust 6, 2025
• bdthemes pixel gallery addons for elementor – easy grid, creative gallery, drag and drop grid, custom grid layout, portfolio gallery Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-7644 6.4 MediumJuly 22, 2025
• bdthemes element pack, element pack elementor addons and templates +1 more Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute CVE-2025-5944 6.4 MediumJuly 3, 2025
• bdthemes element pack pro WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability CVE-2025-46258 5.4 MediumJune 5, 2025
• bdthemes element pack pro WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-46257 4.3 MediumJune 5, 2025
• bdthemes element pack – widgets, templates & addons for elementor Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2025-5292 6.4 MediumMay 31, 2025
• bdthemes ultimate store kit, ultimate store kit – addon for woocommerce, edd and elementor +1 more Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Me… CVE-2025-2168 4.3 MediumMay 1, 2025
• Show olderLoading…