bdthemes
Web & CMS Pluginscommercial
Latest CVEs
The 15 most recently published vulnerabilities affecting bdthemes.
- CVE-2026-65502WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability5.3
- CVE-2026-25403WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability6.5
- CVE-2026-0673Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection5.3
- CVE-2026-65505WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability5.3
- CVE-2026-65503WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2026-57413WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability6.4
- CVE-2025-63079WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability4.3
- CVE-2026-52705WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability9.0
- CVE-2026-40721WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability7.5
- CVE-2026-40745WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability7.6
- CVE-2026-4655Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget6.4
- CVE-2026-4341Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter6.4
- CVE-2026-24362WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability6.4
- CVE-2026-1793Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read6.5
- CVE-2025-31413WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability4.3