Element Pack
Approved changes feed: RSS · Atom
cpe:2.3:a:bdthemes:element_pack:*:*:*:*:lite:wordpress:*:*
part: a version: * update: *
| Vendor | Bdthemes (5429b37a-0acd-5ad1-805d-fa178e11cdda) |
|---|---|
| Product | Element Pack (387b1c9e-bd6d-57cd-8611-1ec1f443c573) |
| Edition | * |
| Language | * |
| Software edition | lite |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-8100 |
vulnerable | 2026-06-08 07:45:19.440745 |
Element Pack Elementor Addons and Templates <= 8.1.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Street Map Widget Marker Content
MEDIUM (5.4)
The Element Pack Elementor Addons and Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'marker_content' parameter in versions up to, and including, 8.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-08-06T03:40:59.487Z
Updated: 2026-04-08T16:48:11.047Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-5944 |
vulnerable | 2026-06-08 07:37:26.121465 |
Element Pack Addons for Elementor <= 8.0.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via data-caption Attribute
MEDIUM (6.4)
The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘data-caption’ attribute in all versions up to, and including, 8.0.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-07-03T04:25:01.278Z
Updated: 2025-07-03T13:17:43.130Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1458 |
vulnerable | 2026-06-08 07:08:37.011097 |
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.29 - Authenticated (Contributor+) Stored Cross-Site Scripting
MEDIUM (6.4)
The Element Pack Addons for Elementor – Free Templates and Widgets for Your WordPress Websites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets like Dual Button, Creative Button, Image Stack and more in all versions up to, and including, 5.10.29 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2025-04-26T05:34:23.210Z
Updated: 2026-04-08T17:03:25.162Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9868 |
vulnerable | 2026-06-08 07:00:28.825324 |
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Age Gate
MEDIUM (5.4)
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Age Gate Widget 'url' parameter in all versions up to, and including, 5.10.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-11-02T02:03:08.762Z
Updated: 2026-04-08T17:09:56.947Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9867 |
vulnerable | 2026-06-08 07:00:28.824882 |
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Open Map Widget
MEDIUM (5.4)
The Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Open Map Widget' marker_content parameter in all versions up to, and including, 5.10.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2024-11-05T11:32:21.953Z
Updated: 2026-04-08T17:23:48.436Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9657 |
vulnerable | 2026-06-08 07:00:28.408726 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-9058 |
vulnerable | 2026-06-08 07:00:26.574254 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-7247 |
vulnerable | 2026-06-08 06:58:21.608425 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5555 |
vulnerable | 2026-06-08 06:56:16.532526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-5554 |
vulnerable | 2026-06-08 06:56:16.531802 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4643 |
vulnerable | 2026-06-08 06:50:18.358663 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4360 |
vulnerable | 2026-06-08 06:50:17.579274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-4359 |
vulnerable | 2026-06-08 06:50:17.578702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-47392 |
vulnerable | 2026-06-08 06:48:11.903659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3927 |
vulnerable | 2026-06-08 06:43:51.896210 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3926 |
vulnerable | 2026-06-08 06:43:51.895701 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3925 |
vulnerable | 2026-06-08 06:43:51.895034 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-39667 |
vulnerable | 2026-06-08 06:41:51.316803 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32572 |
vulnerable | 2026-06-08 06:37:23.217938 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30496 |
vulnerable | 2026-06-08 06:35:30.457315 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-30185 |
vulnerable | 2026-06-08 06:35:29.156473 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-2966 |
vulnerable | 2026-06-08 06:35:27.853554 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-24840 |
vulnerable | 2026-06-08 06:29:41.882637 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1429 |
vulnerable | 2026-06-08 06:25:40.049696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1428 |
vulnerable | 2026-06-08 06:25:40.049312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-1426 |
vulnerable | 2026-06-08 06:25:40.045037 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-12851 |
vulnerable | 2026-06-08 06:25:36.206719 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-11852 |
vulnerable | 2026-06-08 06:23:50.542517 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10980 |
vulnerable | 2026-06-08 06:23:48.345387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10493 |
vulnerable | 2026-06-08 06:23:46.752397 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-10310 |
vulnerable | 2026-06-08 06:22:03.981633 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.