bdthemes 厂商相关 107 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
bdthemes 是一家专注于 WordPress 主题与插件开发的商业厂商，提供各类网站模板解决方案。其产品中历史漏洞频发，累计收录 81 条 CVE，主要涉及远程代码执行、跨站脚本及越权访问等高危类型。部分漏洞源于未充分过滤的用户输入或过时的第三方组件依赖。鉴于其广泛的市场占有率，安全研究人员建议用户及时更新版本，并严格审查自定义代码，以防范潜在的攻击面扩大风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-125708 | WordPress Element Pack 10.0.4 跨站脚本漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-11-11 |
| CVE-2026-124421 | WordPress ZoloBlocks 2.8.2 访问控制漏洞 — ZoloBlocks CWE-862 | 5.3 | Medium | 2026-11-11 |
| CVE-2026-124752 | Elementor Addons 插件 10.0.3 跨站脚本漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-11-11 |
| CVE-2026-119501 | Element Pack 10.0.2 跨站脚本漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-11-07 |
| CVE-2026-119502 | WordPress Ultimate Store Kit 4.0.1 访问控制漏洞 — Ultimate Store Kit Elementor Addons CWE-862 | 5.3 | Medium | 2026-11-07 |
| CVE-2026-111111 | Prime Slider 4.7.2 存储型跨站脚本漏洞 — Prime Slider – Hero Slider, Carousel, WooCommerce & Post Slider Elementor Addons CWE-79 | 7.2 | High | 2026-10-28 |
| CVE-2026-109691 | WordPress Prime Slider <= 4.7.1 跨站脚本漏洞 — Prime Slider – Addons For Elementor CWE-79 | 6.5 | Medium | 2026-10-13 |
| CVE-2026-108478 | WordPress Element Pack插件<=8.8.8存储型XSS漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-10-12 |
| CVE-2026-105886 | WordPress Ultimate Post Kit <= 4.5.5 越权访问漏洞 — Ultimate Post Kit CWE-862 | 6.5 | Medium | 2026-10-08 |
| CVE-2026-105875 | WordPress Prime Slider插件<=4.6.2跨站脚本漏洞 — Prime Slider – Addons For Elementor CWE-79 | 6.5 | Medium | 2026-10-07 |
| CVE-2026-105873 | WordPress Element Pack <= 8.8.6 跨站脚本漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-10-07 |
| CVE-2026-105871 | WordPress Element Pack插件≤8.8.6跨站脚本漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-10-07 |
| CVE-2026-93527 | WordPress Live Copy Paste for Elementor 插件 SQL 注入漏洞 — Live Copy Paste for Elementor CWE-89 | 8.5 | High | 2026-09-23 |
| CVE-2026-92991 | Sigmative Biggopti 库跨站脚本漏洞 — Live Copy Paste for Elementor – Cross Domain Copy Paste & Page Duplicator CWE-79 | 5.4 | Medium | 2026-09-18 |
| CVE-2026-66574 | WordPress Elementor Addons 8.8.3 跨站脚本漏洞 — Element Pack Elementor Addons CWE-79 | 6.5 | Medium | 2026-09-17 |
| CVE-2026-78657 | bdthemes SigmaForms Pro 路径遍历漏洞 — SigmaForms Pro – AI Generated Forms CWE-22 | 9.8 | Critical | 2026-09-02 |
| CVE-2026-14494 | bdthemes SigmaForms Pro 任意文件上传漏洞 — SigmaForms Pro – AI Generated Forms CWE-434 | 9.8 | Critical | 2026-08-29 |
| CVE-2026-65502 | WordPress Element Pack Elementor Addons 授权问题漏洞 — Element Pack Elementor Addons CWE-290 | 5.3 | Medium | 2026-08-06 |
| CVE-2026-25403 | WordPress Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor 授权问题漏洞 — Ultimate Store Kit Elementor Addons CWE-862 | 6.5 | Medium | 2026-08-06 |
| CVE-2026-0673 | WordPress Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons 输入验证错误漏洞 — Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons CWE-93 | 5.3 | Medium | 2026-08-06 |
| CVE-2026-65505 | WordPress Ultimate Store Kit 信息泄露漏洞 — Ultimate Store Kit Elementor Addons CWE-497 | 5.3 | Medium | 2026-07-23 |
| CVE-2026-65503 | WordPress Ultimate Store Kit 跨站脚本漏洞 — Ultimate Store Kit Elementor Addons CWE-79 | 6.5 | Medium | 2026-07-23 |
| CVE-2026-57413 | WordPress Instant AI Image Generator 服务端请求伪造漏洞 — Instant Image Generator CWE-918 | 6.4 | Medium | 2026-07-13 |
| CVE-2025-63079 | bdthemes Live Copy Paste for Elementor 授权问题漏洞 — Live Copy Paste for Elementor CWE-862 | 4.3 | Medium | 2026-06-26 |
| CVE-2026-52705 | BdThemes SigmaForms Pro 任意文件上传漏洞 — SigmaForms Pro – AI Generated Forms CWE-434 | 9.0 | Critical | 2026-06-17 |
| CVE-2026-40721 | BdThemes Element Pack Pro 代码注入漏洞 — Element Pack Pro CWE-98 | 7.5 | High | 2026-06-17 |
| CVE-2026-40745 | WordPress plugin Element Pack Elementor Addons 安全漏洞 — Element Pack Elementor Addons CWE-89 | 7.6 | High | 2026-04-15 |
| CVE-2026-4655 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 6.4 | Medium | 2026-04-08 |
| CVE-2026-4341 | WordPress plugin Prime Slider – Addons for Elementor 跨站脚本漏洞 — Prime Slider – Addons for Elementor CWE-79 | 6.4 | Medium | 2026-04-08 |
| CVE-2026-24362 | WordPress plugin Ultimate Post Kit 安全漏洞 — Ultimate Post Kit CWE-862 | 6.4 | Medium | 2026-03-25 |
本页汇总了 bdthemes 厂商截至目前公开的全部 107 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。