B
Vendor security profile
bdthemes
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical2
CISA KEV0
Public exploit0
Patch rate%0
Avg. CVSS6.9
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
4
4
4
CVE KEV
CVE severity distribution
12toplam CVE
Critical2 (17%)
High1 (8%)
Medium9 (75%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%0
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
12Unknown
Latest vulnerabilities
6.5
CVE-2026-105886
WordPress Ultimate Post Kit plugin <= 4.5.5 - Broken Access Control vulnerability
B
Patch status unknownEPSS %0
6.5
CVE-2026-105875
WordPress Prime Slider – Addons For Elementor plugin <= 4.6.2 - Cross Site Scripting (XSS) vulnerability
B
Patch status unknownEPSS %0
6.5
CVE-2026-105873
WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
B
Patch status unknownEPSS %0
6.5
CVE-2026-105871
WordPress Element Pack Elementor Addons plugin <= 8.8.6 - Cross Site Scripting (XSS) vulnerability
B
Patch status unknownEPSS %0
8.5
CVE-2026-93527
WordPress Live Copy Paste for Elementor plugin <= 1.5.10 - SQL Injection vulnerability
B
Patch status unknownEPSS %0
5.4
CVE-2026-92991
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
B
Patch status unknownEPSS %0
6.5
CVE-2026-66574
WordPress Element Pack Elementor Addons plugin <= 8.8.3 - Cross Site Scripting (XSS) vulnerability
B
Patch status unknownEPSS %0
9.8
CVE-2026-78657
SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field
B
Patch status unknownEPSS %1
9.8
CVE-2026-14494
Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Field
B
Patch status unknownEPSS %1
5.3
CVE-2026-65502
WordPress Element Pack Elementor Addons plugin <= 8.7.13 - Captcha Bypass vulnerability
B
Patch status unknownEPSS %0