Bdthemes
Vulnerability activity for Bdthemes: what is being exploited, what was published lately, and when the next patch release is due.
Last 30 days
- CVEs
- 4
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 90 days
- CVEs
- 10
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Last 365 days
- CVEs
- 10
- Critical (CVSS 9+)
- 0
- Exploited (CISA KEV)
- 0
- With exploit code
- 0
Exploited now
None of this vendor's CVEs are on CISA's known-exploited list.
Recent
- 7.2HighOct 28, 2026Bdthemes Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons XSSCVE-2026-111111The Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'comment' parameter in all versions up to, and including, 4.7.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This is possible because core wp_filter_kses leaves the submit
- 6.5MediumOct 13, 2026BdThemes Prime Slider – Addons For Elementor XSSCVE-2026-109691Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.7.1.
- 6.5MediumOct 12, 2026BdThemes Element Pack Elementor Addons XSSCVE-2026-108478Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.8.
- 6.5MediumOct 8, 2026BdThemes Ultimate Post Kit Auth bypass / access controlCVE-2026-105886Missing Authorization vulnerability in BdThemes Ultimate Post Kit ultimate-post-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ultimate Post Kit: from n/a through 4.5.5.
- 6.5MediumOct 7, 2026BdThemes Prime Slider – Addons For Elementor XSSCVE-2026-105875Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Prime Slider – Addons For Elementor bdthemes-prime-slider-lite allows Stored XSS.This issue affects Prime Slider – Addons For Elementor: from n/a through 4.6.2.
- 6.5MediumOct 7, 2026BdThemes Element Pack Elementor Addons XSSCVE-2026-105873Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6.
- 6.5MediumOct 7, 2026BdThemes Element Pack Elementor Addons XSSCVE-2026-105871Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6.
- 8.5HighSep 23, 2026Bdthemes Live Copy Paste for Elementor SQL injectionCVE-2026-93527Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions.
- 5.4MediumSep 18, 2026Bdthemes Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator XSSCVE-2026-92991The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
- 6.5MediumSep 17, 2026Bdthemes Element Pack Elementor Addons XSSCVE-2026-66574Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions.
Top products
- Element Pack Elementor Addons4 CVEs in the last year
- Prime Slider – Addons For Elementor2 CVEs in the last year
- Ultimate Post Kit1 CVE in the last year
- Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons1 CVE in the last year
- Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator1 CVE in the last year
- Live Copy Paste for Elementor1 CVE in the last year
Counts cover CVEs and advisories Watch Floor tracks, by the date they became news. Updated every 10 minutes.