Skip to content
OpenAdvisories

Vendor

bdthemes

107 known vulnerabilities.

Products

Element Pack – Widgets, Templates & Addons for Elementor 29 Prime Slider – Addons For Elementor 18 Element Pack Elementor Addons 16 Ultimate Store Kit Elementor Addons 13 ZoloBlocks 5 Element Pack Pro 4 Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor 3 SigmaForms Pro – AI Generated Forms 3 Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons 2 ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns 2 Instant Image Generator 2 Ultimate Post Kit 2 Live Copy Paste for Elementor 2 Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons 2 Element Pack Elementor Addons and Templates 1 Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin 1 Spin Wheel – Interactive spinning wheel that offers coupons 1 Ultimate Post Kit Addons for Elementor 1 Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery 1 Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator 1 Pixel Gallery Addons for Elementor 1 Smart Admin Assistant 1 Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder 1 Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets 1
All Critical High Medium Low Exploited only Public exploit

92 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-1426

    Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget

    The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ attribute of the Price List widge…

    bdthemes Element Pack – Widgets, Templates & Addons for Elementor Web / CMS
  • Medium 5.3
    CVE-2024-2966

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search

    The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.5.6 via the element_pack_ajax_search funct…

    bdthemes Element Pack – Widgets, Templates & Addons for Elementor Web / CMS
  • Medium 6.5
    CVE-2024-31357

    WordPress Ultimate Store Kit Elementor Addons plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.5.2.

    bdthemes Ultimate Store Kit Elementor Addons
  • Medium 6.4
    CVE-2024-0837

    Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget

    The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image URL parameter in all versions up t…

    bdthemes Element Pack – Widgets, Templates & Addons for Elementor Web / CMS
  • Medium 6.4
    CVE-2024-1428

    Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget

    The Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘element_pack_wrapper_link’ attribute of…

    bdthemes Element Pack – Widgets, Templates & Addons for Elementor Web / CMS
  • Medium 6.5
    CVE-2024-30186

    WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.13.1.

    bdthemes Prime Slider – Addons For Elementor
  • Medium 6.5
    CVE-2024-30185

    WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 5.5.3.

    bdthemes Element Pack Elementor Addons
  • Medium 4.3
    CVE-2024-24840

    WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability

    Missing Authorization vulnerability in BdThemes Element Pack Elementor Addons.This issue affects Element Pack Elementor Addons: from n/a through 5.4.11.

    bdthemes Element Pack Elementor Addons
  • Medium 4.3
    CVE-2024-24883

    WordPress Prime Slider plugin <= 3.11.10 - Broken Access Control on Duplicate Post vulnerability

    Missing Authorization vulnerability in BdThemes Prime Slider – Addons For Elementor.This issue affects Prime Slider – Addons For Elementor: from n/a through 3.11.10.

    bdthemes Prime Slider – Addons For Elementor
  • Medium 6.4
    CVE-2024-1508

    Prime Slider – Addons For Elementor <= 3.13.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Mercury Widget

    The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'settings['title_tags']' attribute of the Mercury widget in all versions up to, and including, 3.13.2 due to insufficient input sanitization and …

    bdthemes Prime Slider – Addons For Elementor Web / CMS
  • Medium 6.4
    CVE-2024-1507

    Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget

    The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tags' attribute of the Rubix widget in all versions up to, and including, 3.13.3 due to insufficient input sanitization and output escapin…

    bdthemes Prime Slider – Addons For Elementor Web / CMS
  • Medium 6.4
    CVE-2024-1506

    Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget

    The Prime Slider – Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title_tags' attribute of the Fiestar widget in all versions up to, and including, 3.13.1 due to insufficient input sanitization and output escap…

    bdthemes Prime Slider – Addons For Elementor Web / CMS