bdthemes element pack vulnerabilities (CVE)

CVE records published for bdthemes element pack, newest first. Follow to get an email when a new one appears.

4 results
5.4Medium
CVE-2025-8100

Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content

bdthemes Element Pack – Widgets, Templates & Addons for Elementor

The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content' parameter in versions up to, and including, 8.1.5 due to insufficient input sanitization and output escaping. This makes…

7.1%EPSS
6.4Medium
CVE-2025-1458

Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting

bdthemes Element Pack – Widgets, Templates & Addons for Elementor

The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to,…