Advisories · Technology

BdThemes Element Pack Pro.

Every CVE that names BdThemes Element Pack Pro among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-40721 CVE record

CVSS 7.5 High

WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
- BdThemes Element Pack Pro
- File inclusion
Not analysed yet 17 Jun 2026
CVE-2025-46258 CVE record

CVSS 5.4 Medium

WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability
- BdThemes Element Pack Pro
- Broken access control
Not analysed yet 5 Jun 2025
CVE-2025-46257 CVE record

CVSS 4.3 Medium

WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability
- BdThemes Element Pack Pro
- Cross-site request forgery (CSRF)
Not analysed yet 5 Jun 2025
CVE-2024-33568 CVE record

CVSS 8.5 High

WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability
- BdThemes Element Pack Pro
- Path traversal
- Insecure deserialization
Not analysed yet 4 Jun 2024