Vulnerabilidades em BDThemes
96 resultadosAnálise Vexday
BDThemes apresenta um perfil de risco baixo com apenas 1 vulnerabilidade registrada (CWE-79, injeção cross-site), sem indicadores de exploração ativa ou severidade crítica. A vulnerabilidade não é recente, sugerindo que o risco já foi conhecido pelo mercado há mais de 90 dias.
CVE-2026-66574MEDIUMWordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2024-12043MEDIUMPrime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-65503MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-1458MEDIUMElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-5292MEDIUMElement Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder <= 5.11.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-93527HIGHWordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-60161MEDIUMWordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2025-58017MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58230MEDIUMWordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-46258MEDIUMWordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-2168MEDIUMUltimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta UpdateEPSS 0.2%CVE-2025-69336MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-13196MEDIUMElement Pack Addons for Elementor <= 8.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map widgetEPSS 0.2%CVE-2025-68500MEDIUMWordPress Prime Slider – Addons For Elementor plugin <= 4.0.10 - Server Side Request Forgery (SSRF) vulnerabilityEPSS 0.2%CVE-2025-31413MEDIUMWordPress Element Pack Elementor Addons plugin <= 8.3.13 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%CVE-2025-46257MEDIUMWordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%