Medium · 5.4 CVE-2025-46258 EUVD-2025-17012GHSA-w22q-qpw4-g686

WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability

Published Jun 5, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: bdthemes Product: Element Pack Pro

Description

Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Element Pack Pro: from n/a before 8.0.0.

Affected products

Vendor	Product	Affected	Fixed
BdThemes	Element Pack Pro	< 8.0.0	8.0.0

References

https://patchstack.com/database/wordpress/plugin/bdthemes-element-pack/vulnerability/wordpress-element-pack-pro-plugin-7-18-12-broken-access-control-vulnerability?_s_id=cve vdb-entry