VendorsBdThemeselement_packany version
Vulnerabilities

BdThemes Element Pack any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

34CVEs
CVE-2024-30496
WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability
Published 2024-03-29 · Modified
8.8EPSS 0.006
CVE-2024-33568
WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability
Published 2024-06-04 · Modified
8.5EPSS 0.005
CVE-2024-2966
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
Published 2024-04-11 · Modified
7.5EPSS 0.005
CVE-2024-4359
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read
Published 2024-08-09 · Modified
6.5EPSS 0.005
CVE-2024-9657
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Published 2024-11-05 · Analyzed
6.5EPSS 0.004
CVE-2024-30185
WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-27 · Modified
6.5EPSS 0.003
CVE-2024-32572
WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability
Published 2024-04-18 · Modified
6.5EPSS 0.003
CVE-2024-47392
WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability
Published 2024-10-05 · Modified
6.5EPSS 0.003
CVE-2024-39667
WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability
Published 2024-08-01 · Analyzed
6.5EPSS 0.003
CVE-2024-5555
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-07-18 · Modified
6.4EPSS 0.005
CVE-2024-7247
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Gallery and Countdown Widgets
Published 2024-08-13 · Analyzed
6.4EPSS 0.005
CVE-2024-4360
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via title_tag
Published 2024-08-09 · Modified
6.4EPSS 0.005
CVE-2024-1428
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.5.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Trailer Box Widget
Published 2024-04-06 · Modified
6.4EPSS 0.004
CVE-2024-4643
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-08-02 · Modified
6.4EPSS 0.004
CVE-2024-0837
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'Custom Gallery' Widget
Published 2024-04-06 · Modified
6.4EPSS 0.003
CVE-2024-3925
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via onclick events
Published 2024-06-12 · Modified
6.4EPSS 0.003
CVE-2025-5944
Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute
Published 2025-07-03 · Analyzed
6.4EPSS 0.003
CVE-2024-5554
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2024-07-18 · Modified
6.4EPSS 0.003
CVE-2024-2455
Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL
Published 2024-08-01 · Analyzed
6.4EPSS 0.003
CVE-2024-3926
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via custom_attributes
Published 2024-05-22 · Modified
6.4EPSS 0.003
CVE-2024-1426
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Price List Widget
Published 2024-04-18 · Modified
6.4EPSS 0.003
CVE-2024-1429
Element Pack Elementor Addons (Header Footer, Free Template Library, Grid, Carousel, Table, Parallax Animation, Register Form, Twitter Grid) <= 5.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Panel Slider Widget
Published 2024-04-18 · Modified
6.4EPSS 0.003
CVE-2024-12851
Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2025-01-08 · Analyzed
6.4EPSS 0.003
CVE-2024-10310
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget
Published 2024-11-02 · Analyzed
6.4EPSS 0.003
CVE-2024-9058
Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget
Published 2024-12-03 · Analyzed
6.4EPSS 0.002
CVE-2025-1458
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published 2025-04-26 · Analyzed
6.4EPSS 0.002
CVE-2025-8100
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
Published 2025-08-06 · Analyzed
5.4EPSS 0.071
CVE-2024-10493
Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS
Published 2024-11-28 · Analyzed
5.4EPSS 0.004
CVE-2024-10980
Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS
Published 2024-11-29 · Analyzed
5.4EPSS 0.004
CVE-2024-24840
WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability
Published 2024-03-23 · Modified
5.4EPSS 0.003
CVE-2024-9867
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget
Published 2024-11-05 · Analyzed
5.4EPSS 0.003
CVE-2024-9868
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate
Published 2024-11-02 · Analyzed
5.4EPSS 0.003
CVE-2024-3927
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass
Published 2024-05-22 · Modified
5.3EPSS 0.004
CVE-2024-11852
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization
Published 2024-12-22 · Analyzed
4.3EPSS 0.004