Login Request a demo
BD
Vendor
bdthemes
28 products with CVEs on record
162
CVEs
0
On KEV
7
New 30D
Products
EP
Element Pack Elementor Addons
bdthemes
8.8
14 CVEs0 on KEV3 new
PS
Prime Slider – Addons for Elementor
bdthemes
8.8
18 CVEs0 on KEV2 new
PS
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons
bdthemes
7.2
2 CVEs0 on KEV1 new
UP
Ultimate Post Kit
bdthemes
6.5
2 CVEs0 on KEV1 new
EP
Element Pack
Bdthemes
8.8
34 CVEs0 on KEV0 new
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
7.5
29 CVEs0 on KEV0 new
PS
Prime Slider
Bdthemes
8.8
13 CVEs0 on KEV0 new
US
Ultimate Store Kit Elementor Addons
bdthemes
9.8
12 CVEs0 on KEV0 new
EP
Element Pack Pro
BdThemes
7.5
4 CVEs0 on KEV0 new
US
Ultimate Store Kit
Bdthemes
9.8
4 CVEs0 on KEV0 new
ZO
ZoloBlocks
bdthemes
7.5
4 CVEs0 on KEV0 new
SP
SigmaForms Pro – AI Generated Forms
bdthemes
9.8
3 CVEs0 on KEV0 new
US
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor
bdthemes
9.8
3 CVEs0 on KEV0 new
EP
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
bdthemes
5.4
2 CVEs0 on KEV0 new
II
Instant Image Generator
bdthemes
10.0
2 CVEs0 on KEV0 new
LC
Live Copy Paste for Elementor
bdthemes
8.5
2 CVEs0 on KEV0 new
US
Utlimate Store Kit Elementor Addons
Bdthemes
9.8
2 CVEs0 on KEV0 new
ZG
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns
bdthemes
6.4
2 CVEs0 on KEV0 new
EP
Element Pack Elementor Addons and Templates
bdthemes
5.4
1 CVEs0 on KEV0 new
EP
Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin
BDThemes
5.4
1 CVEs0 on KEV0 new
LC
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator
bdthemes
5.4
1 CVEs0 on KEV0 new
PG
Pixel Gallery Addons for Elementor
bdthemes
5.4
1 CVEs0 on KEV0 new
PG
Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery
bdthemes
6.4
1 CVEs0 on KEV0 new
SA
Smart Admin Assistant
bdthemes
5.4
1 CVEs0 on KEV0 new
SW
Spin Wheel – Interactive spinning wheel that offers coupons
bdthemes
5.3
1 CVEs0 on KEV0 new
UP
Ultimate Post Kit Addons for Elementor
bdthemes
6.4
1 CVEs0 on KEV0 new
UP
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets
bdthemes
5.4
1 CVEs0 on KEV0 new
US
Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder
bdthemes
5.4
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-111111
New
PS
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons
bdthemes
7.2
0%
Oct 28Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape
CVE-2026-109691
PS
Prime Slider – Addons For Elementor
BdThemes
6.5
0%
Oct 13WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability
CVE-2026-108478
EP
Element Pack Elementor Addons
BdThemes
6.5
0%
Oct 12WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105886
UP
Ultimate Post Kit
BdThemes
6.5
0%
Oct 8WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
CVE-2026-105875
PS
Prime Slider – Addons For Elementor
BdThemes
6.5
0%
Oct 7WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105873
EP
Element Pack Elementor Addons
BdThemes
6.5
0%
Oct 7WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-105871
EP
Element Pack Elementor Addons
BdThemes
6.5
0%
Oct 7WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2026-93527
LC
Live Copy Paste for Elementor
bdthemes
8.5
0%
Sep 23WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability
CVE-2026-92991
UP
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets
bdthemes
5.4
0%
Sep 18Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
CVE-2026-66574
EP
Element Pack Elementor Addons
bdthemes
6.5
0%
Sep 17WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
CVE-2026-78657
SP
SigmaForms Pro – AI Generated Forms
bdthemes
9.8
1%
Sep 2SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field
CVE-2026-14494
SP
SigmaForms Pro – AI Generated Forms
bdthemes
9.8
1%
Aug 29Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field
CVE-2026-65502
EP
Element Pack Elementor Addons
bdthemes
5.3
0%
Aug 6WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
CVE-2026-25403
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
0%
Aug 6WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability
CVE-2026-0673
EP
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
bdthemes
5.3
0%
Aug 6Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
CVE-2026-65505
US
Ultimate Store Kit Elementor Addons
bdthemes
5.3
0%
Jul 23WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability
CVE-2026-65503
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
0%
Jul 23WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-57413
II
Instant Image Generator
bdthemes
6.4
0%
Jul 13WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-63079
LC
Live Copy Paste for Elementor
bdthemes
4.3
0%
Jun 26WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability
CVE-2026-52705
SP
SigmaForms Pro – AI Generated Forms
BDthemes
9.0
0%
Jun 17WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability
CVE-2026-40721
EP
Element Pack Pro
BdThemes
7.5
0%
Jun 17WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
CVE-2026-40745
EP
Element Pack Elementor Addons
bdthemes
7.6
0%
Apr 15WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability
CVE-2026-4655
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.4
0%
Apr 8Element Pack Addons for Elementor <= 8.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via SVG Image Widget
CVE-2026-4341
PS
Prime Slider – Addons for Elementor
bdthemes
6.4
0%
Apr 8Prime Slider <= 4.1.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'follow_us_text' Parameter
CVE-2026-24362
UP
Ultimate Post Kit
bdthemes
6.4
0%
Mar 25WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability
CVE-2026-1793
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.5
0%
Feb 15Element Pack Addons for Elementor <= 8.3.17 - Authenticated (Contributor+) Arbitrary File Read
CVE-2025-31413
EP
Element Pack Elementor Addons
bdthemes
4.3
0%
Jan 22WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2026-0808
SW
Spin Wheel – Interactive spinning wheel that offers coupons
bdthemes
5.3
0%
Jan 17Spin Wheel <= 2.1.0 - Unauthenticated Client-Side Prize Manipulation via 'prize_index' Parameter
CVE-2025-69336
US
Ultimate Store Kit Elementor Addons
bdthemes
4.3
0%
Jan 6WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability
CVE-2025-68500
PS
Prime Slider – Addons For Elementor
bdthemes
4.9
0%
Dec 24WordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerability
CVE-2025-14277
PS
Prime Slider – Addons for Elementor
bdthemes
4.3
0%
Dec 18Prime Slider – Addons for Elementor <= 4.0.9 - Authenticated (Subscriber+) Server-Side Request Forgery
CVE-2025-13196
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.4
0%
Nov 18Element Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widget
CVE-2025-12134
ZG
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns
bdthemes
5.3
0%
Oct 24ZoloBlocks <= 2.3.11 - Missing Authorization to Unauthenticated Popup Enable/Disable
CVE-2025-49903
ZO
ZoloBlocks
bdthemes
5.3
0%
Oct 22WordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerability
CVE-2025-11536
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.0
0%
Oct 20Element Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
CVE-2025-9075
ZG
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns
bdthemes
6.4
0%
Oct 1ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-60161
ZO
ZoloBlocks
bdthemes
5.4
0%
Sep 26WordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) Vulnerability
CVE-2025-58017
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
0%
Sep 22WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-58230
ZO
ZoloBlocks
bdthemes
6.5
0%
Sep 22WordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerability
CVE-2025-53210
ZO
ZoloBlocks
bdthemes
7.5
1%
Aug 20WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability
CVE-2025-8100
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.4
6%
Aug 6Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
CVE-2025-7644
PG
Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery
bdthemes
6.4
0%
Jul 22Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-5944
EP
Element Pack Elementor Addons and Templates
bdthemes
5.4
0%
Jul 3Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute
CVE-2025-46258
EP
Element Pack Pro
BdThemes
5.4
0%
Jun 5WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability
CVE-2025-46257
EP
Element Pack Pro
BdThemes
4.3
0%
Jun 5WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-5292
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.4
0%
May 31Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2025-2168
US
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor
bdthemes
4.3
0%
May 1Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update
CVE-2025-1458
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.4
0%
Apr 26Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2025-1457
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
6.4
0%
Apr 19Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
CVE-2025-39588
US
Ultimate Store Kit Elementor Addons
bdthemes
9.8
1%
Apr 17WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability
CVE-2025-32184
US
Ultimate Store Kit Elementor Addons
bdthemes
6.5
0%
Apr 4WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24584
US
Ultimate Store Kit Elementor Addons
bdthemes
4.3
0%
Jan 27WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability
CVE-2024-12043
PS
Prime Slider – Addons for Elementor
bdthemes
5.4
0%
Jan 23Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-12851
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.4
0%
Jan 8Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
CVE-2024-11852
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
4.3
0%
Dec 22Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
CVE-2024-9058
EP
Element Pack – Widgets, Templates & Addons for Elementor
bdthemes
5.4
0%
Dec 3Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget
CVE-2024-10980
EP
Element Pack
Bdthemes
5.4
0%
Nov 29Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS
CVE-2024-10493
EP
Element Pack
Bdthemes
5.4
0%
Nov 28Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS
CVE-2024-52377
II
Instant Image Generator
bdthemes
10.0
1%
Nov 14WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability
CVE-2024-8442
PS
Prime Slider – Addons for Elementor
bdthemes
5.4
0%
Nov 7Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget