Veille CVE

Recherche « bdthemes Element Pack Elementor Addons »

7 CVE

Critique 0 Élevée 0 Moyenne 7 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « bdthemes Element Pack Elementor Addons » ✕
  1. CVE-2026-108478 6.5 Moyenne

    BdThemes Element Pack Elementor Addons

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.8.

  2. CVE-2026-105873 6.5 Moyenne

    BdThemes Element Pack Elementor Addons

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6.

  3. CVE-2026-105871 6.5 Moyenne

    BdThemes Element Pack Elementor Addons

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BdThemes Element Pack Elementor Addons bdthemes-element-pack-lite allows Stored XSS.This issue affects Element Pack Elementor Addons: from n/a through 8.8.6.

  4. CVE-2026-92991 5.4 Moyenne

    bdthemes Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator · bdthemes Pixel Gallery Addons for Elementor · bdthemes Smart Admin Assistant · bdthemes Ultimate Store Kit – Store Builder Addons for Elementor, WooCommerce Store Builder, EDD Store Builder

    The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

  5. CVE-2026-66574 6.5 Moyenne

    bdthemes Element Pack Elementor Addons

    Contributor Cross Site Scripting (XSS) in Element Pack Elementor Addons <= 8.8.3 versions.

  6. CVE-2026-65502 5.3 Moyenne

    bdthemes Element Pack Elementor Addons

    Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.

  7. CVE-2026-0673 5.3 Moyenne

    bdthemes Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons

    The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated into email headers. This makes it possible for unauthenticated attackers to inject arbitrary email headers into emails sent by the contact form.