Advisories · Technology

BdThemes Element Pack Elementor Addons.

Every CVE that names BdThemes Element Pack Elementor Addons among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-125708 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 10.0.4 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2026
CVE-2026-124752 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 10.0.3 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 11 Nov 2026
CVE-2026-119501 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 10.0.2 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 7 Nov 2026
CVE-2026-108478 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 12 Oct 2026
CVE-2026-105873 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-105871 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 7 Oct 2026
CVE-2026-66574 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
- bdthemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 17 Sept 2026
CVE-2026-65502 CVE record

CVSS 5.3 Medium

WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
- bdthemes Element Pack Elementor Addons
- Authentication bypass
Not analysed yet 6 Aug 2026
CVE-2026-40745 CVE record

CVSS 7.6 High

WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability
- bdthemes Element Pack Elementor Addons
- SQL injection
Not analysed yet 15 Apr 2026
CVE-2025-31413 CVE record

CVSS 4.3 Medium

WordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerability
- bdthemes Element Pack Elementor Addons
- Cross-site request forgery (CSRF)
Not analysed yet 22 Jan 2026
CVE-2024-47392 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability
- bdthemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 5 Oct 2024
CVE-2024-39667 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 1 Aug 2024
CVE-2024-32572 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 5.6.0 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 18 Apr 2024
CVE-2024-30496 CVE record

CVSS 8.5 High

WordPress Element Pack Lite plugin <= 5.5.3 - SQL Injection vulnerability
- BdThemes Element Pack Elementor Addons
- SQL injection
Not analysed yet 29 Mar 2024
CVE-2024-30185 CVE record

CVSS 6.5 Medium

WordPress Element Pack Elementor Addons plugin <= 5.5.3 - Cross Site Scripting (XSS) vulnerability
- BdThemes Element Pack Elementor Addons
- Cross-site scripting (XSS)
Not analysed yet 27 Mar 2024
CVE-2024-24840 CVE record

CVSS 4.3 Medium

WordPress Element Pack Elementor Addons plugin <= 5.4.11 - Broken Access Control on Duplicate Post vulnerability
- BdThemes Element Pack Elementor Addons
- Broken access control
Not analysed yet 23 Mar 2024