Element Pack vulnerabilities | LiveThreat CVE Feed

Product

Element Pack

by Bdthemes · last CVE Aug 6, 2025

CVEs

On KEV

8.8

Max CVSS

New 30D

Vulnerabilities34 In the news0 Timeline

Severity mix

Critical 0High 2Medium 32Low 0

Severity

All severities34 Critical0 High2 Medium32 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Element Pack to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-4359	6.5	1%	Aug 12	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to arbitrary file reads in all… Affected: before 5.7.3
CVE-2024-33568	6.5	1%	Jun 4	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal,… Affected: through 7.7.4
CVE-2024-5555	6.4	0%	Jul 18	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.6.6
CVE-2024-5554	6.4	0%	Jul 18	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.6.12
CVE-2025-8100	5.4	6%	Aug 6	The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content' parameter in versions up to, and… Affected: before 8.1.6
CVE-2025-5944	5.4	0%	Jul 3	The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ attribute in all versions up to, and including,… Affected: before 8.1.0
CVE-2025-1458	5.4	0%	Apr 26	The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several… Affected: before 5.10.30
CVE-2024-12851	5.4	0%	Jan 8	Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting Affected: before 5.10.15
CVE-2024-9058	5.4	0%	Dec 3	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.10.6
CVE-2024-10980	5.4	0%	Nov 29	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of… Affected: before 5.10.3
CVE-2024-10493	5.4	0%	Nov 28	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its… Affected: before 5.10.3
CVE-2024-9867	5.4	0%	Nov 5	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.10.3
CVE-2024-9657	5.4	0%	Nov 5	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.10.3
CVE-2024-9868	5.4	0%	Nov 2	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.10.2
CVE-2024-10310	5.4	0%	Nov 2	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.10.2
CVE-2024-47392	5.4	0%	Oct 5	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows… Affected: before 5.7.6
CVE-2024-7247	5.4	0%	Aug 13	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.7.3
CVE-2024-4360	5.4	0%	Aug 12	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.7.7
CVE-2024-4643	5.4	0%	Aug 2	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: through 5.7.1
CVE-2024-39667	5.4	0%	Aug 1	Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue… Affected: before 5.6.12
CVE-2024-2455	5.4	0%	Aug 1	The Element Pack - Addon for Elementor Page Builder WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget wrapper link URL in all… Affected: through 7.9.0
CVE-2024-3925	5.4	0%	Jun 12	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.6.12
CVE-2024-3926	5.4	0%	May 22	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via… Affected: before 5.6.2
CVE-2024-32572	5.4	0%	Apr 18	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects… Affected: before 5.6.1
CVE-2024-1429	5.4	0%	Apr 18	The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable… Affected: before 5.6.1
CVE-2024-1426	5.4	0%	Apr 18	The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable… Affected: through 5.6.1
CVE-2024-1428	5.4	0%	Apr 6	The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable… Affected: before 5.5.4
CVE-2024-0837	5.4	0%	Apr 6	The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable… Affected: before 5.3.3
CVE-2024-30185	5.4	0%	Mar 27	Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects… Affected: before 5.5.4
CVE-2024-24840	5.4	0%	Mar 23	Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11 Affected: before 5.4.12
CVE-2024-3927	5.3	0%	May 22	The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Form Submission Admin Email… Affected: before 5.6.4
CVE-2024-11852	4.3	0%	Dec 22	Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization Affected: before 5.10.13