Vendor

    BdThemes

    105 known vulnerabilities in products by BdThemes, 0 of them actively exploited (CISA KEV).

    Key figures

    105

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    7

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in BdThemes
    MediumCVE-2025-8100

    Element Pack Elementor Addons and Templates: Cross-site Scripting

    		5.4
    CriticalCVE-2026-78657

    BdThemes SigmaForms Pro: Path Traversal

    		9.8
    CriticalCVE-2026-14494

    BdThemes SigmaForms Pro: Unrestricted Upload of File with Dangerous Type

    		9.8
    CriticalCVE-2024-8030

    BdThemes Ultimate Store Kit: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2024-5335

    BdThemes Ultimate Store Kit: Deserialization of Untrusted Data

    		9.8
    HighCVE-2026-93527

    WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability

    		8.5
    CriticalCVE-2025-39588

    BdThemes Ultimate Store Kit Elementor Addons: Deserialization of Untrusted Data

    		9.8
    CriticalCVE-2024-52377

    BdThemes Instant Image Generator: Unrestricted Upload of File with Dangerous Type

    		10.0
    HighCVE-2025-53210

    WordPress ZoloBlocks Plugin <= 2.3.2 - Local File Inclusion Vulnerability

    		7.5
    HighCVE-2026-111111

    Cross-site Scripting (CVE-2026-111111)

    		7.2
    CriticalCVE-2026-52705

    WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability

    		9.0
    HighCVE-2026-40721

    WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability

    		7.5
    HighCVE-2024-30496

    WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability

    		8.5
    MediumCVE-2026-92991

    Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API

    		5.4
    MediumCVE-2026-105886

    WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

    		6.5
    HighCVE-2024-33568

    BdThemes Element Pack Pro: Path Traversal

    		8.5
    MediumCVE-2026-108478

    WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-109691

    BdThemes Prime Slider: Cross-site Scripting

    		6.5
    MediumCVE-2026-105875

    BdThemes Prime Slider: Cross-site Scripting

    		6.5
    MediumCVE-2026-105873

    WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-105871

    WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-66574

    WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-25403

    WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability

    		6.5
    MediumCVE-2026-4655

    Cross-site Scripting (CVE-2026-4655)

    		6.4
    HighCVE-2026-40745

    WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability

    		7.6

    All vulnerabilities in search

    Products

    Products by BdThemes
    Element Pack340
    Element Pack – Widgets, Templates & Addons For Elementor290
    Prime Slider – Addons For Elementor190
    Element Pack Elementor Addons130
    Prime Slider130
    Ultimate Store Kit Elementor Addons120
    Element Pack Pro40
    Ultimate Store Kit40
    ZoloBlocks40
    Sigmaforms Pro – AI Generated Forms30
    Ultimate Store Kit – Addon For Woocommerce, Edd And Elementor30