Vulnerabilidades do Bdthemes Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Bdthemes Element Pack Addons for Elementor – Elementor Widgets, Elementor Templates, Elementor Addons: 2 registro(s), com versões afetadas e correções.
CVE-2026-92991
Média · 5.4
CWE-79 18/09/2026
Biggopti Library (Various Versions) - Cross-Site Scripting via display_id from Sigmative API
The Biggop Library is vulnerable to Cross-Site Scripting via the ‘display_id’ parameter from the Sigmative API in various versions due to insufficient output escaping. This makes it possible for attackers who can compromise the Sigmative API server to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVE-2026-0673
Média · 5.3
CWE-93 06/08/2026
Element Pack Addons for Elementor <= 8.3.15 - Unauthenticated SMTP Header Injection
The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` AJAX action. This is due to insufficient sanitization of newline characters in user-supplied input that gets concatenated into email headers. This makes it possible for unauthenticated attackers to inject arbitrary email headers into emails sent by the contact form.