Medium · 4.3 CVE-2025-46257 EUVD-2025-17011GHSA-8849-vpvc-g9wp

WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability

Published Jun 5, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: bdthemes Product: Element Pack Pro

Description

Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This issue affects Element Pack Pro: from n/a before 8.0.0.

Affected products

Vendor	Product	Affected	Fixed
BdThemes	Element Pack Pro	< 8.0.0	8.0.0

References

https://patchstack.com/database/wordpress/plugin/bdthemes-element-pack/vulnerability/wordpress-element-pack-pro-plugin-7-18-12-cross-site-request-forgery-csrf-vulnerability?_s_id=cve vdb-entry