bdthemes 厂商相关 90 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
bdthemes 是一家专注于 WordPress 主题与插件开发的商业厂商，提供各类网站模板解决方案。其产品中历史漏洞频发，累计收录 81 条 CVE，主要涉及远程代码执行、跨站脚本及越权访问等高危类型。部分漏洞源于未充分过滤的用户输入或过时的第三方组件依赖。鉴于其广泛的市场占有率，安全研究人员建议用户及时更新版本，并严格审查自定义代码，以防范潜在的攻击面扩大风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-65502 | WordPress Element Pack Elementor Addons 授权问题漏洞 — Element Pack Elementor Addons CWE-290 | 5.3 | Medium | 2026-08-06 |
| CVE-2026-25403 | WordPress Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor 授权问题漏洞 — Ultimate Store Kit Elementor Addons CWE-862 | 6.5 | Medium | 2026-08-06 |
| CVE-2026-0673 | WordPress Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons 输入验证错误漏洞 — Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons CWE-93 | 5.3 | Medium | 2026-08-06 |
| CVE-2026-65505 | WordPress Ultimate Store Kit 信息泄露漏洞 — Ultimate Store Kit Elementor Addons CWE-497 | 5.3 | Medium | 2026-07-23 |
| CVE-2026-65503 | WordPress Ultimate Store Kit 跨站脚本漏洞 — Ultimate Store Kit Elementor Addons CWE-79 | 6.5 | Medium | 2026-07-23 |
| CVE-2026-57413 | WordPress Instant AI Image Generator 服务端请求伪造漏洞 — Instant Image Generator CWE-918 | 6.4 | Medium | 2026-07-13 |
| CVE-2025-63079 | bdthemes Live Copy Paste for Elementor 授权问题漏洞 — Live Copy Paste for Elementor CWE-862 | 4.3 | Medium | 2026-06-26 |
| CVE-2026-52705 | BdThemes SigmaForms Pro 任意文件上传漏洞 — SigmaForms Pro – AI Generated Forms CWE-434 | 9.0 | Critical | 2026-06-17 |
| CVE-2026-40721 | BdThemes Element Pack Pro 代码注入漏洞 — Element Pack Pro CWE-98 | 7.5 | High | 2026-06-17 |
| CVE-2026-40745 | WordPress plugin Element Pack Elementor Addons 安全漏洞 — Element Pack Elementor Addons CWE-89 | 7.6 | High | 2026-04-15 |
| CVE-2026-4655 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 6.4 | Medium | 2026-04-08 |
| CVE-2026-4341 | WordPress plugin Prime Slider – Addons for Elementor 跨站脚本漏洞 — Prime Slider – Addons for Elementor CWE-79 | 6.4 | Medium | 2026-04-08 |
| CVE-2026-24362 | WordPress plugin Ultimate Post Kit 安全漏洞 — Ultimate Post Kit CWE-862 | 6.4 | Medium | 2026-03-25 |
| CVE-2026-1793 | WordPress plugin Element Pack Addons for Elementor 路径遍历漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-22 | 6.5 | Medium | 2026-02-15 |
| CVE-2025-31413 | WordPress plugin bdthemes-element-pack-lite 跨站请求伪造漏洞 — Element Pack Elementor Addons CWE-352 | 4.3 | Medium | 2026-01-22 |
| CVE-2026-0808 | WordPress plugin Spin Wheel 安全漏洞 — Spin Wheel – Interactive spinning wheel that offers coupons CWE-602 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-69336 | WordPress plugin Ultimate Store Kit Elementor Addons 安全漏洞 — Ultimate Store Kit Elementor Addons CWE-862 | 4.3 | Medium | 2026-01-06 |
| CVE-2025-68500 | WordPress plugin Prime Slider – Addons For Elementor 安全漏洞 — Prime Slider – Addons For Elementor CWE-918 | 4.9 | Medium | 2025-12-24 |
| CVE-2025-14277 | WordPress plugin Prime Slider 代码问题漏洞 — Prime Slider – Addons for Elementor CWE-918 | 4.3 | Medium | 2025-12-18 |
| CVE-2025-13196 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 5.4 | Medium | 2025-11-18 |
| CVE-2025-12134 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns CWE-862 | 5.3 | Medium | 2025-10-24 |
| CVE-2025-49903 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks CWE-862 | 5.3 | Medium | 2025-10-22 |
| CVE-2025-11536 | WordPress plugin Element Pack Addons for Elementor 代码问题漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-918 | 5.0 | Medium | 2025-10-20 |
| CVE-2025-9075 | WordPress plugin ZoloBlocks 跨站脚本漏洞 — ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns CWE-79 | 6.4 | Medium | 2025-10-01 |
| CVE-2025-60161 | WordPress plugin ZoloBlocks 代码问题漏洞 — ZoloBlocks CWE-918 | 5.4 | Medium | 2025-09-26 |
| CVE-2025-58017 | WordPress plugin Ultimate Store Kit Elementor Addons 跨站脚本漏洞 — Ultimate Store Kit Elementor Addons CWE-79 | 6.5 | Medium | 2025-09-22 |
| CVE-2025-58230 | WordPress plugin ZoloBlocks 跨站脚本漏洞 — ZoloBlocks CWE-79 | 6.5 | Medium | 2025-09-22 |
| CVE-2025-53210 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks CWE-98 | 7.5 | High | 2025-08-20 |
| CVE-2025-8100 | WordPress plugin Element Pack Elementor Addons and Templates 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 5.4 | Medium | 2025-08-06 |
| CVE-2025-7644 | WordPress plugin Pixel Gallery Addons for Elementor 跨站脚本漏洞 — Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery CWE-79 | 6.4 | Medium | 2025-07-22 |
本页汇总了 bdthemes 厂商截至目前公开的全部 90 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。