Log in Start free

BDThemes

Products

ProductCVEsExploitedLatest
Element Pack – Widgets, Templates & Addons for Elementor29–Apr 8, 2026
Prime Slider – Addons For Elementor18–Oct 13, 2026
Element Pack Elementor Addons14–Nov 7, 2026
Ultimate Store Kit Elementor Addons13–Nov 7, 2026
Element Pack Pro4–Jun 17, 2026
ZoloBlocks4–Oct 22, 2025
SigmaForms Pro – AI Generated Forms3–Sep 2, 2026
Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor3–May 1, 2025
ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns2–Oct 24, 2025
Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons2–Sep 18, 2026
Instant Image Generator2–Jul 13, 2026
Live Copy Paste for Elementor2–Sep 23, 2026
Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons2–Oct 28, 2026
Ultimate Post Kit2–Oct 8, 2026
Smart Admin Assistant1–Sep 18, 2026
Spin Wheel – Interactive spinning wheel that offers coupons1–Jan 17, 2026
Element Pack Elementor Addons and Templates1–Jul 3, 2025
Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets1–Sep 18, 2026
Ultimate Post Kit Addons for Elementor1–Jun 28, 2024
Pixel Gallery Addons for Elementor1–Sep 18, 2026
Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder1–Sep 18, 2026
Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator1–Sep 18, 2026
Element Pack Pro - Addon for Elementor Page Builder WordPress Plugin1–Aug 1, 2024
Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery1–Jul 22, 2025

Exploited and recent CVEs

  • CVE-2026-119501 Medium 6.5 WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability –
  • CVE-2026-119502 Medium 5.3 WordPress Ultimate Store Kit Elementor Addons plugin <= 4.0.1 - Broken Access Control vulnerability –
  • CVE-2026-111111 High 7.2 Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape 0.2%
  • CVE-2026-109691 Medium 6.5 WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-108478 Medium 6.5 WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-105886 Medium 6.5 WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability 0.2%
  • CVE-2026-105875 Medium 6.5 WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-105873 Medium 6.5 WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-105871 Medium 6.5 WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability 0.1%
  • CVE-2026-93527 High 8.5 WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-92991 Medium 5.4 Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API 0.4%
  • CVE-2026-66574 Medium 6.5 WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-78657 Critical 9.8 SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field 1.0%
  • CVE-2026-14494 Critical 9.8 Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field 0.9%
  • CVE-2026-65502 Medium 5.3 WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability 0.3%
  • CVE-2026-25403 Medium 6.5 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability 0.3%
  • CVE-2026-0673 Medium 5.3 Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection 0.4%
  • CVE-2026-65505 Medium 5.3 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2026-65503 Medium 6.5 WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57413 Medium 6.4 WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability 0.2%
  • CVE-2025-63079 Medium 4.3 WordPress Live Copy Paste for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability 0.3%
  • CVE-2026-52705 Critical 9.0 WordPress SigmaForms Pro – AI Generated Forms plugin <= 1.4.5 - Arbitrary File Upload vulnerability 0.3%
  • CVE-2026-40721 High 7.5 WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability 0.4%
  • CVE-2026-40745 High 7.6 WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability 0.2%