What’s Vulnerable › Products
bdthemes Ultimate Store Kit Elementor Addons vulnerabilities
14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 9 published in the last 12 months.
Check whether your bdthemes Ultimate Store Kit Elementor Addons version is affected
Latest bdthemes Ultimate Store Kit Elementor Addons vulnerabilities
- CVE-2026-25403 — WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Broken Access Control vulnerability (CVSS 6.5)
- CVE-2026-65505 — WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Sensitive Data Exposure vulnerability (CVSS 5.3)
- CVE-2026-65503 — WordPress Ultimate Store Kit Elementor Addons plugin <= 3.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-69336 — WordPress Ultimate Store Kit Elementor Addons plugin <= 2.9.4 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2025-58017 — WordPress Ultimate Store Kit Elementor Addons plugin <= 2.8.6 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-2168 — Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update (CVSS 4.3)
- CVE-2025-39588 — WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.0 - Deserialization of untrusted data Vulnerability (CVSS 9.8)
- CVE-2025-32184 — WordPress Ultimate Store Kit Elementor Addons plugin <= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2025-24584 — WordPress Ultimate Store Kit Elementor Addons plugin <= 2.3.0 - Broken Access Control vulnerability (CVSS 4.3)
- CVE-2024-47629 — WordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
- CVE-2024-8030 — Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 2.0.3 - Unauthenticated PHP Object Injection (CVSS 9.8)
- CVE-2024-5335 — Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider <= 1.6.4 - Unauthenticated PHP Object Injection (CVSS 9.8)
- CVE-2024-43342 — WordPress Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
- CVE-2024-31357 — WordPress Ultimate Store Kit Elementor Addons plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)