Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: bdthemes Component: Ultimate Store Kit Clear all filters
TI-2025-01900 CVE-2025-2168 · GHSA-2982-34wj-7m53

Cross-site request forgery in bdthemes Ultimate Store Kit – Addon For WooCommerce, EDD…

Priority LOW 19

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00203 Published 2025-05-01 No fix listed CWE-352
TI-2024-07444 CVE-2024-8030 · GHSA-3g2j-hcpv-vrj2

Deserialization of untrusted data in bdthemes Ultimate Store Kit – Addon For WooCommerce…

Priority MEDIUM 51

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01075 Published 2024-08-28 No fix listed CWE-502
TI-2024-04954 CVE-2024-5335 · GHSA-j52g-696q-x7c6

Deserialization of untrusted data in bdthemes Ultimate Store Kit – Addon For WooCommerce…

Priority MEDIUM 44

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin is vulnerable to PHP Object Injection via deserialization of untr…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00852 Published 2024-08-21 No fix listed CWE-502
TI-2024-28994 CVE-2024-43342 · GHSA-mchv-xvmg-h4fh

Cross-site scripting in bdthemes Ultimate Store Kit Elementor Addons

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-08-18 No fix listed CWE-79