Skip to content
Noroxi

bdthemes records

53 published records for vendor bdthemes.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
30.2%
Median publish → KEV
No record has entered KEV

Records by year

  1. 24
  2. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

53 records
  • CVE-2024-52377
    40Plan

    WordPress Instant Image Generator (One Click Image Uploads from Pixabay, Pexels and OpenAI) plugin <= 1.5.2 - Arbitrary File Upload vulnerability

    CriticalCVSS 10.0No exploitEPSS 1%

    bdthemes · instant image generatorNov 14, 2024

  • CVE-2024-8030
    39Monitor

    Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unaut

    CriticalCVSS 9.8No exploitEPSS 1%

    bdthemes · ultimate store kitAug 27, 2024

  • CVE-2024-5335
    39Monitor

    Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unaut

    CriticalCVSS 9.8No exploitEPSS 1%

    bdthemes · ultimate store kitAug 21, 2024

  • CVE-2024-30496
    35Monitor

    WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    bdthemes · element packMar 29, 2024

  • CVE-2024-32682
    35Monitor

    WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    bdthemes · prime sliderApr 22, 2024

  • CVE-2024-32681
    35Monitor

    WordPress Prime Slider plugin <= 3.13.2 - Broken Access Control vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    bdthemes · prime sliderApr 22, 2024

  • CVE-2024-2966
    30Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_p

    HighCVSS 7.5No exploitEPSS 0%

    bdthemes · element packApr 11, 2024

  • CVE-2024-33568
    26Monitor

    WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability

    MediumCVSS 6.5No exploitEPSS 1%

    bdthemes · element packJun 4, 2024

  • CVE-2024-4359
    26Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File R

    MediumCVSS 6.5No exploitEPSS 1%

    bdthemes · element packAug 12, 2024

  • CVE-2024-5555
    25Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Sit

    MediumCVSS 6.4No exploitEPSS 0%

    bdthemes · element packJul 18, 2024

  • CVE-2024-5554
    25Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Si

    MediumCVSS 6.4No exploitEPSS 0%

    bdthemes · element packJul 18, 2024

  • CVE-2025-8100
    22Monitor

    Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content

    MediumCVSS 5.4No exploitEPSS 4%

    bdthemes · element packAug 6, 2025

  • CVE-2024-7247
    21Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Sit

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packAug 13, 2024

  • CVE-2024-4360
    21Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Sit

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packAug 12, 2024

  • CVE-2024-1507
    21Monitor

    Prime Slider – Addons For Elementor <= 3.13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Rubix Widget

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · prime sliderMar 13, 2024

  • CVE-2024-1428
    21Monitor

    Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenti

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packApr 6, 2024

  • CVE-2024-3927
    21Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass

    MediumCVSS 5.3No exploitEPSS 0%

    bdthemes · element packMay 22, 2024

  • CVE-2024-4643
    21Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Si

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packAug 2, 2024

  • CVE-2024-10493
    21Monitor

    Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packNov 28, 2024

  • CVE-2024-10980
    21Monitor

    Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packNov 29, 2024

  • CVE-2024-30186
    21Monitor

    WordPress Prime Slider plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · prime sliderMar 27, 2024

  • CVE-2024-0837
    21Monitor

    Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenti

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packApr 6, 2024

  • CVE-2024-1506
    21Monitor

    Prime Slider – Addons For Elementor <= 3.13.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Fiestar Widget

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · prime sliderMar 7, 2024

  • CVE-2024-3925
    21Monitor

    Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Si

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · element packJun 12, 2024

  • CVE-2024-1730
    21Monitor

    Prime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Media Slider, Drag Drop Slider, Video Slider, Product Slider, Ecommerce Slider) <= 3.1

    MediumCVSS 5.4No exploitEPSS 0%

    bdthemes · prime sliderApr 20, 2024