Skip to content
OpenAdvisories

Vendor

bdthemes

107 known vulnerabilities.

Products

Element Pack – Widgets, Templates & Addons for Elementor 29 Prime Slider – Addons For Elementor 18 Element Pack Elementor Addons 16 Ultimate Store Kit Elementor Addons 13 ZoloBlocks 5 Element Pack Pro 4 Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor 3 SigmaForms Pro – AI Generated Forms 3 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons 2 ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns 2 Instant Image Generator 2 Ultimate Post Kit 2 Live Copy Paste for Elementor 2 Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons 2 Element Pack Elementor Addons and Templates 1 Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin 1 Spin Wheel – Interactive spinning wheel that offers coupons 1 Ultimate Post Kit Addons for Elementor 1 Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery 1 Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator 1 Pixel Gallery Addons for Elementor 1 Smart Admin Assistant 1 Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder 1 Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets 1
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 7.2
    CVE-2026-111111

    Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

    The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.7.2 due to insufficient input sanitizati…

    bdthemes Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons Web / CMS
  • High 8.5
    CVE-2026-93527

    WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

    Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.

    bdthemes Live Copy Paste for Elementor
  • High 7.5
    CVE-2026-40721

    WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability

    Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions.

    bdthemes Element Pack Pro
  • High 7.6
    CVE-2026-40745

    WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in bdthemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Blind SQL Injection.This issue affects Element Pack Elementor Addons: from n/a throu…

    bdthemes Element Pack Elementor Addons
  • High 7.5
    CVE-2025-53210

    WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability

    Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in bdthemes ZoloBlocks zoloblocks allows PHP Local File Inclusion.This issue affects ZoloBlocks: from n/a through <= 2.3.2.

    bdthemes ZoloBlocks
  • High 8.5
    CVE-2024-33568

    WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3.

    bdthemes Element Pack Pro
  • High 7.1
    CVE-2024-32682

    WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability

    Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.2.

    bdthemes Prime Slider – Addons For Elementor
  • High 8.5
    CVE-2024-30496

    WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3.

    bdthemes Element Pack Elementor Addons