bdthemes 厂商相关 107 条 CVE 漏洞，含 AI 中文分析、POC、CVSS 评分与受影响产品。
bdthemes 是一家专注于 WordPress 主题与插件开发的商业厂商，提供各类网站模板解决方案。其产品中历史漏洞频发，累计收录 81 条 CVE，主要涉及远程代码执行、跨站脚本及越权访问等高危类型。部分漏洞源于未充分过滤的用户输入或过时的第三方组件依赖。鉴于其广泛的市场占有率，安全研究人员建议用户及时更新版本，并严格审查自定义代码，以防范潜在的攻击面扩大风险。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2026-1793 | WordPress plugin Element Pack Addons for Elementor 路径遍历漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-22 | 6.5 | Medium | 2026-02-15 |
| CVE-2025-31413 | WordPress plugin bdthemes-element-pack-lite 跨站请求伪造漏洞 — Element Pack Elementor Addons CWE-352 | 4.3 | Medium | 2026-01-22 |
| CVE-2026-0808 | WordPress plugin Spin Wheel 安全漏洞 — Spin Wheel – Interactive spinning wheel that offers coupons CWE-602 | 5.3 | Medium | 2026-01-17 |
| CVE-2025-69336 | WordPress plugin Ultimate Store Kit Elementor Addons 安全漏洞 — Ultimate Store Kit Elementor Addons CWE-862 | 4.3 | Medium | 2026-01-06 |
| CVE-2025-68500 | WordPress plugin Prime Slider – Addons For Elementor 安全漏洞 — Prime Slider – Addons For Elementor CWE-918 | 4.9 | Medium | 2025-12-24 |
| CVE-2025-14277 | WordPress plugin Prime Slider 代码问题漏洞 — Prime Slider – Addons for Elementor CWE-918 | 4.3 | Medium | 2025-12-18 |
| CVE-2025-13196 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 5.4 | Medium | 2025-11-18 |
| CVE-2025-12134 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns CWE-862 | 5.3 | Medium | 2025-10-24 |
| CVE-2025-49903 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks CWE-862 | 5.3 | Medium | 2025-10-22 |
| CVE-2025-11536 | WordPress plugin Element Pack Addons for Elementor 代码问题漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-918 | 5.0 | Medium | 2025-10-20 |
| CVE-2025-9075 | WordPress plugin ZoloBlocks 跨站脚本漏洞 — ZoloBlocks – Gutenberg Block Editor Plugin with Advanced Blocks, Dynamic Content, Templates & Patterns CWE-79 | 6.4 | Medium | 2025-10-01 |
| CVE-2025-60161 | WordPress plugin ZoloBlocks 代码问题漏洞 — ZoloBlocks CWE-918 | 5.4 | Medium | 2025-09-26 |
| CVE-2025-58017 | WordPress plugin Ultimate Store Kit Elementor Addons 跨站脚本漏洞 — Ultimate Store Kit Elementor Addons CWE-79 | 6.5 | Medium | 2025-09-22 |
| CVE-2025-58230 | WordPress plugin ZoloBlocks 跨站脚本漏洞 — ZoloBlocks CWE-79 | 6.5 | Medium | 2025-09-22 |
| CVE-2025-53210 | WordPress plugin ZoloBlocks 安全漏洞 — ZoloBlocks CWE-98 | 7.5 | High | 2025-08-20 |
| CVE-2025-8100 | WordPress plugin Element Pack Elementor Addons and Templates 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 5.4 | Medium | 2025-08-06 |
| CVE-2025-7644 | WordPress plugin Pixel Gallery Addons for Elementor 跨站脚本漏洞 — Pixel Gallery Addons for Elementor – Easy Grid, Creative Gallery, Drag and Drop Grid, Custom Grid Layout, Portfolio Gallery CWE-79 | 6.4 | Medium | 2025-07-22 |
| CVE-2025-5944 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack Elementor Addons and Templates CWE-79 | 6.4 | Medium | 2025-07-03 |
| CVE-2025-46258 | WordPress plugin Element Pack Pro 安全漏洞 — Element Pack Pro CWE-862 | 5.4 | Medium | 2025-06-05 |
| CVE-2025-46257 | WordPress plugin Element Pack Pro 跨站请求伪造漏洞 — Element Pack Pro CWE-352 | 4.3 | Medium | 2025-06-05 |
| CVE-2025-5292 | WordPress plugin Element Pack Addons for Elementor – Best Elementor addons with Ready Templates, Blocks, Widgets and WooCommerce Builder 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 6.4 | Medium | 2025-05-31 |
| CVE-2025-2168 | WordPress plugin Ultimate Store Kit 跨站请求伪造漏洞 — Ultimate Store Kit – Addon For WooCommerce, EDD and Elementor CWE-352 | 4.3 | Medium | 2025-05-01 |
| CVE-2025-1458 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 6.4 | Medium | 2025-04-26 |
| CVE-2025-1457 | WordPress plugin Element Pack Addons for Elementor 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 6.4 | Medium | 2025-04-19 |
| CVE-2025-39588 | WordPress plugin Ultimate Store Kit Elementor Addons 代码问题漏洞 — Ultimate Store Kit Elementor Addons CWE-502 | 9.8 | Critical | 2025-04-17 |
| CVE-2025-32184 | WordPress plugin Ultimate Store Kit Elementor Addons 跨站脚本漏洞 — Ultimate Store Kit Elementor Addons CWE-79 | 6.5 | Medium | 2025-04-04 |
| CVE-2025-24584 | WordPress plugin Ultimate Store Kit Elementor Addons 安全漏洞 — Ultimate Store Kit Elementor Addons CWE-862 | 4.3 | Medium | 2025-01-27 |
| CVE-2024-12043 | WordPress plugin Prime Slider 跨站脚本漏洞 — Prime Slider – Addons for Elementor CWE-79 | 6.4 | Medium | 2025-01-23 |
| CVE-2024-12851 | WordPress plugin Element Pack Elementor Addons 跨站脚本漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-79 | 6.4 | Medium | 2025-01-08 |
| CVE-2024-11852 | WordPress plugin Element Pack Elementor Addons 安全漏洞 — Element Pack – Widgets, Templates & Addons for Elementor CWE-862 | 4.3 | Medium | 2024-12-22 |
本页汇总了 bdthemes 厂商截至目前公开的全部 107 条 CVE 漏洞。每条漏洞均包含 CVSS 评分、CWE 弱点分类、受影响产品与参考链接，并附带 AI 生成的中文分析以便快速判断风险。