Advisories · Technology
bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor.
Every CVE that names bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User M…
- bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor
- Cross-site request forgery (CSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection
- bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor
- Insecure deserialization
- CVSS 9.8 CriticalCritical · CVSS 9+
Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection
- bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor
- Insecure deserialization