Read the docs

bdthemes

Records107All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

bdthemes records in CISA KEV

No bdthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Ultimate Store Kit · all components

Priority MEDIUM 51

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01075 Published 2024-08-28 No fix listed CWE-502
Priority MEDIUM 44

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00852 Published 2024-08-21 No fix listed CWE-502
Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-08-18 No fix listed CWE-79
Priority LOW 19

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00203 Published 2025-05-01 No fix listed CWE-352
Open these records in search →