Bdthemes Element Pack vulnerabilities

• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content CVE-2025-8100 5.4 MediumAugust 6, 2025
• bdthemes element pack, element pack elementor addons and templates +1 more Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute CVE-2025-5944 6.4 MediumJuly 3, 2025
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2025-1458 6.4 MediumApril 26, 2025
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-12851 6.4 MediumJanuary 8, 2025
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization CVE-2024-11852 4.3 MediumDecember 22, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget CVE-2024-9058 6.4 MediumDecember 3, 2024
• bdthemes element pack elementor addons (header footer, template library, dynamic grid, carousel and remote arrows), element pack, element pack elementor addons wordpress pack elementor addons wordpress +2 more Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS CVE-2024-10980 5.4 MediumNovember 29, 2024
• bdthemes element pack elementor addons (header footer, template library, dynamic grid & carousel, remote arrows), element pack, element pack elementor addons wordpress pack elementor addons wordpress +2 more Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS CVE-2024-10493 5.4 MediumNovember 28, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget CVE-2024-9867 5.4 MediumNovember 5, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting CVE-2024-9657 6.5 MediumNovember 5, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate CVE-2024-9868 5.4 MediumNovember 2, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Galler… CVE-2024-10310 6.4 MediumNovember 2, 2024
• bdthemes element pack elementor addons, element pack +1 more WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability CVE-2024-47392 6.5 MediumOctober 5, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Count… CVE-2024-7247 6.4 MediumAugust 13, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read CVE-2024-4359 6.5 MediumAugust 9, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag CVE-2024-4360 6.4 MediumAugust 9, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-4643 6.4 MediumAugust 2, 2024
• bdthemes element pack elementor addons, element pack +1 more WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability CVE-2024-39667 6.5 MediumAugust 1, 2024
• bdthemes element pack, element pack pro - addon for elementor page builder wordpress plugin +1 more Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL CVE-2024-2455 6.4 MediumAugust 1, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5555 6.4 MediumJuly 18, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-5554 6.4 MediumJuly 18, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via onclick events CVE-2024-3925 6.4 MediumJune 12, 2024
• bdthemes element pack pro, element pack +1 more WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability CVE-2024-33568 8.5 HighJune 4, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes CVE-2024-3926 6.4 MediumMay 22, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass CVE-2024-3927 5.3 MediumMay 22, 2024
• bdthemes element pack elementor addons, element pack +1 more WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability CVE-2024-32572 6.5 MediumApril 18, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site S… CVE-2024-1429 6.4 MediumApril 18, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site S… CVE-2024-1426 6.4 MediumApril 18, 2024
• bdthemes element pack, element pack elementor addons, element pack – widgets, templates & addons for elementor +2 more Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search CVE-2024-2966 5.3 MediumApril 11, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site S… CVE-2024-0837 6.4 MediumApril 6, 2024
• bdthemes element pack, element pack – widgets, templates & addons for elementor +1 more Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site S… CVE-2024-1428 6.4 MediumApril 6, 2024
• bdthemes element pack elementor addons, element pack +1 more WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability CVE-2024-30496 8.5 HighMarch 29, 2024
• bdthemes element pack elementor addons, element pack +1 more WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-30185 6.5 MediumMarch 27, 2024
• bdthemes element pack elementor addons, element pack +1 more WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability CVE-2024-24840 4.3 MediumMarch 23, 2024