BdThemes
- Total products in the ecosystem
- 24
- Total vulnerabilities (90 days)
- 14
en
A short verification protects source data and prevents automated AI requests.
Verifying...
As of 11/08/2026, BdThemes recorded 14 security vulnerabilities in the last 90 days across 13 products, including 4 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, Element Pack Elementor Addons had the most security vulnerabilities in the BdThemes ecosystem, with 5 vulnerabilities—approximately 35.71% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-1457Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingCVE-2025-39588WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data VulnerabilityCVE-2025-32184WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-24584WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerabilityCVE-2024-12043Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2025-1457Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.28 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes |
| Affected productElement Pack – Widgets, Templates & Addons for Elementor |
| Published04/19/2025 |
| SeverityMedium |
CVE-2025-39588WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published04/17/2025 | SeverityCritical |
|---|
CVE-2025-32184WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published04/04/2025 | SeverityMedium |
|---|
CVE-2025-24584WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published01/27/2025 | SeverityMedium |
|---|
CVE-2024-12043Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published01/23/2025 | SeverityMedium |
|---|
CVE-2024-12851Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published01/08/2025 | SeverityMedium |
|---|
CVE-2024-11852Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published12/22/2024 | SeverityMedium |
|---|
CVE-2024-9058Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published12/03/2024 | SeverityMedium |
|---|
CVE-2024-52377WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability | Exploitation statusNot exploited | FixYes | Affected productInstant Image Generator | Published11/14/2024 | SeverityCritical |
|---|
CVE-2024-8442Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published11/07/2024 | SeverityMedium |
|---|
CVE-2024-9867Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published11/05/2024 | SeverityMedium |
|---|
CVE-2024-9657Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published11/05/2024 | SeverityMedium |
|---|
CVE-2024-9868Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published11/02/2024 | SeverityMedium |
|---|
CVE-2024-10310Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published11/02/2024 | SeverityMedium |
|---|
CVE-2024-47629WordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published10/05/2024 | SeverityMedium |
|---|
CVE-2024-47392WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Elementor Addons | Published10/05/2024 | SeverityMedium |
|---|
CVE-2024-8030Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit – Addon For WooCommerce, EDD and Elementor | Published08/28/2024 | SeverityCritical |
|---|
CVE-2024-5335Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit – Addon For WooCommerce, EDD and Elementor | Published08/21/2024 | SeverityCritical |
|---|
CVE-2024-43342WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published08/18/2024 | SeverityMedium |
|---|
CVE-2024-7247Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published08/13/2024 | SeverityMedium |
|---|
CVE-2024-4360Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published08/09/2024 | SeverityMedium |
|---|
CVE-2024-4359Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published08/09/2024 | SeverityMedium |
|---|
CVE-2024-4643Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published08/02/2024 | SeverityMedium |
|---|
CVE-2024-39667WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Elementor Addons | Published08/01/2024 | SeverityMedium |
|---|
CVE-2024-2455Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL | Exploitation statusNot exploited | FixYes | Affected productElement Pack Pro - Addon for Elementor Page Builder WordPress Plugin | Published08/01/2024 | SeverityMedium |
|---|
CVE-2024-5555Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published07/18/2024 | SeverityMedium |
|---|
CVE-2024-5554Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published07/18/2024 | SeverityMedium |
|---|
CVE-2024-5662Ultimate Post Kit Addons For Elementor – (Post Grid, Post Carousel, Post Slider, Category List, Post Tabs, Timeline, Post Ticker, Tag Cloud) <= 3.11.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Social Count (Static) Widget | Exploitation statusNot exploited | FixYes | Affected productUltimate Post Kit Addons for Elementor | Published06/28/2024 | SeverityMedium |
|---|
CVE-2024-3925Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via onclick events | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published06/12/2024 | SeverityMedium |
|---|
CVE-2024-5640Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pacific Widget | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published06/07/2024 | SeverityMedium |
|---|
CVE-2024-33568WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Pro | Published06/04/2024 | SeverityHigh |
|---|
CVE-2024-3997Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Pagepiling Widget | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published05/23/2024 | SeverityMedium |
|---|
CVE-2024-3927Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-3926Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published05/22/2024 | SeverityMedium |
|---|
CVE-2024-4606WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder plugin <= 2.0.3 - PHP Object Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published05/09/2024 | SeverityMedium |
|---|
CVE-2024-4339Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.14.3 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published05/09/2024 | SeverityMedium |
|---|
CVE-2024-32682WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published04/22/2024 | SeverityHigh |
|---|
CVE-2024-32681WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published04/22/2024 | SeverityMedium |
|---|
CVE-2024-1730Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published04/20/2024 | SeverityMedium |
|---|
CVE-2024-32572WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Elementor Addons | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-1429Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-1426Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published04/18/2024 | SeverityMedium |
|---|
CVE-2024-2966Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published04/11/2024 | SeverityMedium |
|---|
CVE-2024-31357WordPress Ultimate Store Kit Elementor Addons plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productUltimate Store Kit Elementor Addons | Published04/08/2024 | SeverityMedium |
|---|
CVE-2024-1428Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published04/06/2024 | SeverityMedium |
|---|
CVE-2024-0837Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget | Exploitation statusNot exploited | FixYes | Affected productElement Pack – Widgets, Templates & Addons for Elementor | Published04/06/2024 | SeverityMedium |
|---|
CVE-2024-30496WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Elementor Addons | Published03/29/2024 | SeverityHigh |
|---|
CVE-2024-30186WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productPrime Slider – Addons For Elementor | Published03/27/2024 | SeverityMedium |
|---|
CVE-2024-30185WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Elementor Addons | Published03/27/2024 | SeverityMedium |
|---|
CVE-2024-24840WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability | Exploitation statusNot exploited | FixYes | Affected productElement Pack Elementor Addons | Published03/23/2024 | SeverityMedium |
|---|
104 Results | Page 2 of 3