Vulnerabilidades em BdThemes
91 resultadosAnálise Vexday
BdThemes apresenta um perfil de risco moderado com 16 vulnerabilidades catalogadas, predominantemente relacionadas a Cross-Site Scripting (CWE-79), mas nenhuma em exploração ativa no momento. A ausência de CVEs críticas e o baixo ritmo de divulgações recentes (1 vulnerabilidade nos últimos 90 dias) indicam que o risco atual é gerenciável, embora a prevalência de XSS exija atenção contínua em implementações frontend.
CVE-2024-10310MEDIUMElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery WidgetEPSS 0.2%CVE-2024-47629MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-49903MEDIUMWordPress ZoloBlocks plugin <= 2.3.11 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-24362MEDIUMWordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2026-65505MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerabilityEPSS 0.2%CVE-2025-7644MEDIUMPixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-65502MEDIUMWordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerabilityEPSS 0.2%CVE-2024-9058MEDIUMElement Pack Elementor Addons <= 5.10.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Lightbox WidgetEPSS 0.2%CVE-2026-40745HIGHWordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerabilityEPSS 0.2%CVE-2025-24584MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerabilityEPSS 0.2%CVE-2025-9075MEDIUMZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns <= 2.3.10 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-12134MEDIUMZoloBlocks <= 2.3.11 - Missing Authorization to Unauthenticated Popup Enable/DisableEPSS 0.2%CVE-2025-11536MEDIUMElement Pack Addons for Elementor <= 8.2.5 - Authenticated (Subscriber+) Blind Server-Side Request ForgeryEPSS 0.2%CVE-2024-12043MEDIUMPrime Slider – Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider) <= 3.16.5 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2026-0673MEDIUMElement Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header InjectionEPSS 0.2%CVE-2025-1458MEDIUMElement Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%CVE-2025-60161MEDIUMWordPress ZoloBlocks Plugin <= 2.3.11 - Server Side Request Forgery (SSRF) VulnerabilityEPSS 0.2%CVE-2025-58230MEDIUMWordPress ZoloBlocks plugin <= 2.3.12 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-58017MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-25403MEDIUMWordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerabilityEPSS 0.2%