Advisories · Technology

bdthemes Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets.

Every CVE that names bdthemes Ultimate Post Kit – Elementor Post Grid, Post Carousel, Post Slider & Blog Layout Widgets among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-92991 CVE record

CVSS 5.4 Medium

Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
- bdthemes Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator
- bdthemes Pixel Gallery Addons for Elementor
- Cross-site scripting (XSS)
Not analysed yet 18 Sept 2026