Bdthemes Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Bdthemes Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons: 2 record(s), with affected versions and fixes.
CVE-2026-92991
Medium · 5.4
CWE-79 Sep 18, 2026
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2026-0673
Medium · 5.3
CWE-93 Aug 6, 2026
Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated into email headers. This makes it possible for unauthenticated attackers to inject arbitrary email headers into emails sent by the contact form.