Login Request a demo
BD
Vendor
Bdthemes
19 products with CVEs on record
85
CVEs
0
On KEV
7
New 30D
Products
EP
Element Pack Elementor Addons
bdthemes
7.6
6 CVEs0 on KEV3 new
PS
Prime Slider – Addons for Elementor
bdthemes
6.5
3 CVEs0 on KEV2 new
PS
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons
bdthemes
7.2
2 CVEs0 on KEV1 new
UP
Ultimate Post Kit
bdthemes
6.5
2 CVEs0 on KEV1 new
EP
Element Pack
Bdthemes
8.8
34 CVEs0 on KEV0 new
PS
Prime Slider
Bdthemes
8.8
13 CVEs0 on KEV0 new
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.5
4 CVEs0 on KEV0 new
US
Ultimate Store Kit
Bdthemes
9.8
4 CVEs0 on KEV0 new
SP
SigmaForms Pro – AI Generated Forms
bdthemes
9.8
3 CVEs0 on KEV0 new
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
3 CVEs0 on KEV0 new
EP
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
bdthemes
5.4
2 CVEs0 on KEV0 new
LC
Live Copy Paste for Elementor
bdthemes
8.5
2 CVEs0 on KEV0 new
EP
Element Pack Pro
BdThemes
7.5
1 CVEs0 on KEV0 new
II
Instant Image Generator
bdthemes
6.4
1 CVEs0 on KEV0 new
LC
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator
bdthemes
5.4
1 CVEs0 on KEV0 new
PG
Pixel Gallery Addons for Elementor
bdthemes
5.4
1 CVEs0 on KEV0 new
SA
Smart Admin Assistant
bdthemes
5.4
1 CVEs0 on KEV0 new
UP
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets
bdthemes
5.4
1 CVEs0 on KEV0 new
US
Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder
bdthemes
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111111
New
PS
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons
bdthemes
7.2–Oct 28Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape
CVE-2026-109691
PS
Prime Slider – Addons For Elementor
BdThemes
6.5
0%
Oct 13WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-108478
EP
Element Pack Elementor Addons
BdThemes
6.5
0%
Oct 12WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105886
UP
Ultimate Post Kit
BdThemes
6.5
0%
Oct 8WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
CVE-2026-105875
PS
Prime Slider – Addons For Elementor
BdThemes
6.5
0%
Oct 7WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105873
EP
Element Pack Elementor Addons
BdThemes
6.5
0%
Oct 7WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105871
EP
Element Pack Elementor Addons
BdThemes
6.5
0%
Oct 7WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93527
LC
Live Copy Paste for Elementor
bdthemes
8.5
0%
Sep 23WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability
CVE-2026-92991
SA
Smart Admin Assistant
bdthemes
5.4
0%
Sep 18Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
CVE-2026-66574
EP
Element Pack Elementor Addons
bdthemes
6.5
0%
Sep 17WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78657
SP
SigmaForms Pro – AI Generated Forms
bdthemes
9.8
1%
Sep 2SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field
CVE-2026-14494
SP
SigmaForms Pro – AI Generated Forms
bdthemes
9.8
1%
Aug 29Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field
CVE-2026-65502
EP
Element Pack Elementor Addons
bdthemes
5.3
0%
Aug 6WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
CVE-2026-25403
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
0%
Aug 6WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
CVE-2026-0673
EP
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
bdthemes
5.3
0%
Aug 6Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
CVE-2026-65505
US
Ultimate Store Kit Elementor Addons
bdthemes
5.3
0%
Jul 23WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability
CVE-2026-65503
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
0%
Jul 23WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57413
II
Instant Image Generator
bdthemes
6.4
0%
Jul 13WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-63079
LC
Live Copy Paste for Elementor
bdthemes
4.3
0%
Jun 26WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-52705
SP
SigmaForms Pro – AI Generated Forms
BDthemes
9.0
0%
Jun 17WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability
CVE-2026-40721
EP
Element Pack Pro
BdThemes
7.5
0%
Jun 17WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
CVE-2026-40745
EP
Element Pack Elementor Addons
bdthemes
7.6
0%
Apr 15WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability
CVE-2026-4655
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.4
0%
Apr 8Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget
CVE-2026-4341
PS
Prime Slider – Addons for Elementor
bdthemes
6.4
0%
Apr 8Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter
CVE-2026-24362
UP
Ultimate Post Kit
bdthemes
6.4
0%
Mar 25WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability
CVE-2026-1793
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.5
0%
Feb 15Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read
CVE-2025-8100
EP
Element Pack
Bdthemes
5.4
6%
Aug 6The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content' parameter in versions up to, and…
CVE-2025-5944
EP
Element Pack
Bdthemes
5.4
0%
Jul 3The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ attribute in all versions up to, and including,…
CVE-2025-2168
US
Ultimate Store Kit
Bdthemes
4.3
0%
May 1The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is…
CVE-2025-1458
EP
Element Pack
Bdthemes
5.4
0%
Apr 26The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several…
CVE-2024-12043
PS
Prime Slider
Bdthemes
5.4
0%
Jan 23The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Post Slider and Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting…
CVE-2024-12851
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.4
0%
Jan 8Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11852
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
4.3
0%
Dec 22Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
CVE-2024-9058
EP
Element Pack
Bdthemes
5.4
0%
Dec 3The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-10980
EP
Element Pack
Bdthemes
5.4
0%
Nov 29The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of…
CVE-2024-10493
EP
Element Pack
Bdthemes
5.4
0%
Nov 28The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) WordPress plugin before 5.10.3 does not validate and escape some of its…
CVE-2024-8442
PS
Prime Slider
Bdthemes
5.4
0%
Nov 7The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
CVE-2024-9867
EP
Element Pack
Bdthemes
5.4
0%
Nov 5The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-9657
EP
Element Pack
Bdthemes
5.4
0%
Nov 5The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-9868
EP
Element Pack
Bdthemes
5.4
0%
Nov 2The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-10310
EP
Element Pack
Bdthemes
5.4
0%
Nov 2The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-47392
EP
Element Pack
Bdthemes
5.4
0%
Oct 5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows…
CVE-2024-8030
US
Ultimate Store Kit
Bdthemes
9.8
1%
Aug 28The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP…
CVE-2024-5335
US
Ultimate Store Kit
Bdthemes
9.8
1%
Aug 21The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP…
CVE-2024-43342
US
Ultimate Store Kit
Bdthemes
5.4
0%
Aug 18Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This…
CVE-2024-7247
EP
Element Pack
Bdthemes
5.4
0%
Aug 13The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-4360
EP
Element Pack
Bdthemes
5.4
0%
Aug 12The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-4359
EP
Element Pack
Bdthemes
6.5
1%
Aug 12The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to arbitrary file reads in all…
CVE-2024-4643
EP
Element Pack
Bdthemes
5.4
0%
Aug 2The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-39667
EP
Element Pack
Bdthemes
5.4
0%
Aug 1Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue…
CVE-2024-2455
EP
Element Pack
Bdthemes
5.4
0%
Aug 1The Element Pack - Addon for Elementor Page Builder WordPress Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the widget wrapper link URL in all…
CVE-2024-5555
EP
Element Pack
Bdthemes
6.4
0%
Jul 18The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-5554
EP
Element Pack
Bdthemes
6.4
0%
Jul 18The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-3925
EP
Element Pack
Bdthemes
5.4
0%
Jun 12The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-5640
PS
Prime Slider
Bdthemes
5.4
0%
Jun 7The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’…
CVE-2024-33568
EP
Element Pack
Bdthemes
6.5
1%
Jun 4Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal,…
CVE-2024-3997
PS
Prime Slider
Bdthemes
5.4
0%
May 23The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's…
CVE-2024-3926
EP
Element Pack
Bdthemes
5.4
0%
May 22The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via…
CVE-2024-3927
EP
Element Pack
Bdthemes
5.3
0%
May 22The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Form Submission Admin Email…
CVE-2024-4339
PS
Prime Slider
Bdthemes
5.4
0%
May 14The Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the General…