Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

bdthemes vulnerabilities

105 published CVEs name bdthemes among the affected products.

All 105 in the listAtom feed of new CVEs
Published CVEs
105
Last 12 months
34
Critical
7
Known exploited
0

Critical 7High 8Medium 90Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 202449
  2. 202525
  3. 202631

Newest CVEs

  • CVE-2026-119501

    WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-119502

    WordPress Ultimate Store Kit Elementor Addons plugin <= 4.0.1 - Broken Access Control vulnerability

    BdThemes · Ultimate Store Kit Elementor Addons

    Medium5.3
  • CVE-2026-111111

    Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

    bdthemes · Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons

    High7.2
  • CVE-2026-109691

    WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Prime Slider – Addons For Elementor

    Medium6.5
  • CVE-2026-108478

    WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-105886

    WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

    BdThemes · Ultimate Post Kit

    Medium6.5
  • CVE-2026-105875

    WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Prime Slider – Addons For Elementor

    Medium6.5
  • CVE-2026-105873

    WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-105871

    WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-93527

    WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

    bdthemes · Live Copy Paste for Elementor

    High8.5

Products with the most CVEs

  1. Element Pack – Widgets, Templates & Addons for Elementor29
  2. Prime Slider – Addons for Elementor19
  3. Element Pack Elementor Addons14
  4. Ultimate Store Kit Elementor Addons13
  5. Element Pack Pro4
  6. ZoloBlocks4
  7. SigmaForms Pro – AI Generated Forms3
  8. Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor3
  9. Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons2
  10. Instant Image Generator2

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)59
  2. CWE-862 Missing authorization16
  3. CWE-502 Deserialization of untrusted data5
  4. CWE-918 Server-side request forgery (SSRF)5
  5. CWE-22 Path traversal3
  6. CWE-352 Cross-site request forgery (CSRF)3
  7. CWE-434 Unrestricted file upload3
  8. CWE-89 SQL injection3
  9. CWE-98 PHP remote file inclusion3
  10. CWE-200 Exposure of sensitive information1