How many bdthemes Element Pack Pro CVEs are in CISA KEV?

None of bdthemes Element Pack Pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Which versions of bdthemes Element Pack Pro are affected?

10 distinct bdthemes Element Pack Pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in bdthemes Element Pack Pro CVEs?

bdthemes Element Pack Pro's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data), CWE-862 (Missing Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).

What is the average severity of bdthemes Element Pack Pro CVEs?

The average CVSS base score across bdthemes Element Pack Pro's scored CVEs is 6.4.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

bdthemes

4 CVEs

bdthemes Element Pack Pro Vulnerabilities

Name: bdthemes Element Pack Pro vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for Element Pack Pro by bdthemes.

4

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

6.4

Avg CVSS

2024–2026

Last updated June 17, 2026

Overview

bdthemes Element Pack Pro has 4 published CVE records since 2024, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 6.4.

This page aggregates every publicly disclosed vulnerability (CVE) affecting bdthemes Element Pack Pro, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of bdthemes Element Pack Pro's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium2

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of bdthemes Element Pack Pro's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No bdthemes Element Pack Pro CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every bdthemes Element Pack Pro version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 8.0.02 CVEs
>= 8.0.02 CVEs
< 7.19.31 CVE
<= 9.0.61 CVE
>= 7.19.31 CVE
>= 9.1.01 CVE

Fixed in

8.0.02 CVEs
> 9.0.61 CVE
7.19.31 CVE
9.1.01 CVE

Find a version

4 CVEs

Sort

WordPress Element Pack Pro plugin <= 9.0.6 - Local File Inclusion vulnerability
CVE-2026-40721
Patch
CWE-98
High · CVSS 7.5
EPSS 0.4% (33th pct)2026-06-17
WordPress Element Pack Pro Plugin < 8.0.0 - Broken Access Control vulnerability
CVE-2025-46258
Patch
CWE-862
Medium · CVSS 5.4
EPSS 0.2% (8th pct)2025-06-05
WordPress Element Pack Pro Plugin < 8.0.0 - Cross Site Request Forgery (CSRF) vulnerability
CVE-2025-46257
Patch
CWE-352
Medium · CVSS 4.3
EPSS 0.1% (3th pct)2025-06-05
WordPress Element Pack Pro plugin < 7.19.3 - Arbitrary File Read and Phar Deserialization vulnerability
CVE-2024-33568
Patch
CWE-502
High · CVSS 8.5
EPSS 0.5% (41th pct)2024-06-04

Common weakness types

The CWE weakness categories most often found in bdthemes Element Pack Pro CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many bdthemes Element Pack Pro CVEs were published each year.

2024

1

2025

2

2026

1

Other bdthemes products

Browse vulnerabilities for other products by bdthemes.

element pack34 CVEs Element Pack – Widgets, Templates & Addons for Elementor29 CVEs Prime Slider – Addons for Elementor17 CVEs prime slider13 CVEs Ultimate Store Kit Elementor Addons11 CVEs Element Pack Elementor Addons9 CVEs ultimate store kit4 CVEs ZoloBlocks4 CVEs

All bdthemes vulnerabilities

Frequently asked questions

Common questions about bdthemes Element Pack Pro vulnerabilities.

How many CVEs does bdthemes Element Pack Pro have?: bdthemes Element Pack Pro has 4 published CVE records since 2024.
How many bdthemes Element Pack Pro CVEs are in CISA KEV?: None of bdthemes Element Pack Pro's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for bdthemes Element Pack Pro vulnerabilities?: No bdthemes Element Pack Pro CVEs currently have a tracked public exploit in this dataset.
Which versions of bdthemes Element Pack Pro are affected?: 10 distinct bdthemes Element Pack Pro versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in bdthemes Element Pack Pro CVEs?: bdthemes Element Pack Pro's CVEs most often map to these CWE weakness types: CWE-352 (Cross-Site Request Forgery (CSRF)), CWE-502 (Deserialization of Untrusted Data), CWE-862 (Missing Authorization), CWE-98 (Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')).
What is the average severity of bdthemes Element Pack Pro CVEs?: The average CVSS base score across bdthemes Element Pack Pro's scored CVEs is 6.4.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track bdthemes Element Pack Pro vulnerabilities

Monitor new bdthemes Element Pack Pro vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing