Bdthemes / Element Pack
34 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2025-8100 | Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content | MEDIUM | 5.4 | Aug 6, 2025 |
| CVE-2025-5944 | Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute | MEDIUM | 6.4 | Jul 3, 2025 |
| CVE-2025-1458 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cros… | MEDIUM | 6.4 | Apr 26, 2025 |
| CVE-2024-12851 | Element Pack Lite - Addons for Elementor <= 5.10.14 - Authenticated (Contributor+) Stored Cross-Site Scripting | MEDIUM | 6.4 | Jan 8, 2025 |
| CVE-2024-11852 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.12 - Missing Authorization | MEDIUM | 4.3 | Dec 22, 2024 |
| CVE-2024-9058 | Element Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox Widget | MEDIUM | 6.4 | Dec 3, 2024 |
| CVE-2024-10980 | Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS | MEDIUM | 5.4 | Nov 29, 2024 |
| CVE-2024-10493 | Element Pack Elementor Addons < 5.10.3 - Contributor+ Stored XSS | MEDIUM | 5.4 | Nov 28, 2024 |
| CVE-2024-9867 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-S… | MEDIUM | 5.4 | Nov 5, 2024 |
| CVE-2024-9657 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) DOM-Based Stor… | MEDIUM | 6.5 | Nov 5, 2024 |
| CVE-2024-9868 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-S… | MEDIUM | 5.4 | Nov 2, 2024 |
| CVE-2024-10310 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stor… | MEDIUM | 6.4 | Nov 2, 2024 |
| CVE-2024-47392 | WordPress Element Pack Elementor Addons plugin <= 5.7.5 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 6.5 | Oct 5, 2024 |
| CVE-2024-7247 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Stored Cross-Si… | MEDIUM | 6.4 | Aug 13, 2024 |
| CVE-2024-4359 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File… | MEDIUM | 6.5 | Aug 9, 2024 |
| CVE-2024-4360 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.6 - Authenticated (Contributor+) Stored Cross-Si… | MEDIUM | 6.4 | Aug 9, 2024 |
| CVE-2024-4643 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-S… | MEDIUM | 6.4 | Aug 2, 2024 |
| CVE-2024-39667 | WordPress Element Pack Elementor Addons plugin <= 5.6.11 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 6.5 | Aug 1, 2024 |
| CVE-2024-2455 | Element Pack - Addon for Elementor Page Builder WordPress Plugin <= 7.9.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via Wrapper Link URL | MEDIUM | 6.4 | Aug 1, 2024 |
| CVE-2024-5555 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.5 - Authenticated (Contributor+) Stored Cross-Si… | MEDIUM | 6.4 | Jul 18, 2024 |
| CVE-2024-5554 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-S… | MEDIUM | 6.4 | Jul 18, 2024 |
| CVE-2024-3925 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.11 - Authenticated (Contributor+) Stored Cross-S… | MEDIUM | 6.4 | Jun 12, 2024 |
| CVE-2024-33568 | WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability | HIGH | 8.5 | Jun 4, 2024 |
| CVE-2024-3926 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.1 - Authenticated (Contributor+) Stored Cross-Si… | MEDIUM | 6.4 | May 22, 2024 |
| CVE-2024-3927 | Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.6.3 - Form Submission Admin Email Bypass | MEDIUM | 5.3 | May 22, 2024 |
Showing 1 to 25 of 34 CVEs