Skip to content
CVE Tracker
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

bdthemes vulnerabilities

103 published CVEs name bdthemes among the affected products.

All 103 in the listAtom feed of new CVEs
Published CVEs
103
Last 12 months
32
Critical
7
Known exploited
0

Critical 7High 8Medium 88Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 202449
  2. 202525
  3. 202629

Newest CVEs

  • CVE-2026-111111

    Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

    bdthemes · Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons

    High7.2
  • CVE-2026-109691

    WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Prime Slider – Addons For Elementor

    Medium6.5
  • CVE-2026-108478

    WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-105886

    WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

    BdThemes · Ultimate Post Kit

    Medium6.5
  • CVE-2026-105875

    WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Prime Slider – Addons For Elementor

    Medium6.5
  • CVE-2026-105873

    WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-105871

    WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

    BdThemes · Element Pack Elementor Addons

    Medium6.5
  • CVE-2026-93527

    WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

    bdthemes · Live Copy Paste for Elementor

    High8.5
  • CVE-2026-92991

    Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API

    bdthemes · Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator

    Medium5.4
  • CVE-2026-66574

    WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability

    bdthemes · Element Pack Elementor Addons

    Medium6.5

Products with the most CVEs

  1. Element Pack – Widgets, Templates & Addons for Elementor29
  2. Prime Slider – Addons for Elementor19
  3. Element Pack Elementor Addons13
  4. Ultimate Store Kit Elementor Addons12
  5. Element Pack Pro4
  6. ZoloBlocks4
  7. SigmaForms Pro – AI Generated Forms3
  8. Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor3
  9. Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons2
  10. Instant Image Generator2

Most common weaknesses

  1. CWE-79 Cross-site scripting (XSS)58
  2. CWE-862 Missing authorization15
  3. CWE-502 Deserialization of untrusted data5
  4. CWE-918 Server-side request forgery (SSRF)5
  5. CWE-22 Path traversal3
  6. CWE-352 Cross-site request forgery (CSRF)3
  7. CWE-434 Unrestricted file upload3
  8. CWE-89 SQL injection3
  9. CWE-98 PHP remote file inclusion3
  10. CWE-200 Exposure of sensitive information1