SecAlerts
B

BdThemes

Security Risk Profile

44
/100
medium

Security Risk Score

Comprehensive risk assessment based on 72 vulnerabilities, EPSS scores, exploitation status, and remediation availability.

📅 Data spans from March 7, 2024 to present

72
Total CVEs
11
Critical+High
0
Exploited
4
Unpatched

Threat Assessment

Avg CVSS
6.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
44/100
medium
🆕 1Fresh (<7d)📈 7 in Last 30 Days

Severity Distribution

Critical
3
High
8
Medium
61
Low
0

Exploit Likelihood

>50% chance
0
20-50%
0
5-20%
0
<5%
28

Age Distribution

Common Weaknesses (CWE)

1
XSS
48
2
SSRF
2
3
SQL Injection
2
4
CSRF
2
5
Malicious File Upload
1

Most Affected Products

1. bdthemes Element Pack Wordpress32
2. bdthemes Prime Slider Wordpress13
3. Element Pack Elementor Addons13
4. Prime Slider Addons For Elementor8
5. bdthemes Element Pack Elementor Addons6

Recent Vulnerabilities

See more →
CVE-2026-111111
CVSS 7.2high

Prime Slider <= 4.7.2 - Unauthenticated Stored Cross-Site Scripting via Comment Content via Content_Guard Regex Quote-Escape

Oct 28, 2026🔧 No Patch
CVE-2026-109691
CVSS 6.5medium

WordPress Prime Slider – Addons For Elementor plugin <= 4.7.1 - Cross Site Scripting (XSS) vulnerability

Oct 13, 2026🔧 No Patch
CVE-2026-108478
CVSS 6.5medium

WordPress Element Pack Elementor Addons plugin <= 8.8.8 - Cross Site Scripting (XSS) vulnerability

Oct 12, 2026🔧 No Patch
CVE-2026-105886
CVSS 6.5medium

WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability

Oct 8, 2026🔧 No Patch
CVE-2026-105875
CVSS 6.5medium

WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability

Oct 7, 2026🔧 No Patch
CVE-2026-105873
CVSS 6.5medium

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Oct 7, 2026🔧 No Patch
CVE-2026-105871
CVSS 6.5medium

WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability

Oct 7, 2026🔧 No Patch
CVE-2026-57413
CVSS 6.4medium

WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability

Jul 13, 2026🔧 No Patch
CVE-2026-40745
CVSS 7.6high

WordPress Element Pack Elementor Addons plugin <= 8.4.2 - SQL Injection vulnerability

Apr 15, 2026🔧 No Patch
CVE-2026-24362
CVSS 6.4medium

WordPress Ultimate Post Kit plugin <= 4.0.21 - Broken Access Control vulnerability

Mar 25, 2026🔧 No Patch

Monitor BdThemes in Real-Time

Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.

Powered bySecAlerts

Monitor Your Software Stack in Real-Time

Get instant alerts when vulnerabilities are discovered in your software stack. Stay ahead of security threats with SecAlerts.

© 2026 SecAlerts Pty Ltd. All rights reserved.

BdThemes Security Vulnerabilities & Risk Score | 72 CVEs | SecAlerts - SecAlerts