CVE-2025-2168

The Ultimate Store Kit Elementor Addons, Woocommerce Builder, EDD Builder, Elementor Store Builder, Product Grid, Product Table, Woocommerce Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.1. This is due to missing or incorrect non...

CVE-2025-32184

CVE-2025-32184 is a stored XSS vulnerability in Ultimate Store Kit – Elementor Addons for WordPress. According to the CVE, it affects Ultimate Store Kit Elementor Addons from n/a through 2.4.0. A Wordfence entry also references this CVE as affecting Ultimate Store Kit Elementor Addons

CVE-2024-47629

CVE-2024-47629 describes a Stored Cross-Site Scripting (XSS) vulnerability in BdThemes Ultimate Store Kit Elementor Addons (and related bundles) affecting versions up to 2.0.5. The root cause is improper input neutralization during web page generation. CVSS 3.1/6.5 (Medium) with network attack ve...

CVE-2024-47629 WordPress Ultimate Store Kit Elementor Addons plugin <= 2.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 2.0.5...

CVE-2024-43342

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.6.4...

CVE-2024-4606

Deserialization of Untrusted Data in BdThemes Ultimate Store Kit Elementor Addons CVE-2024-4606 affects Ultimate Store Kit Elementor Addons and related bundles (WordPress plugins) up to version 2.0.3. Root cause: PHP object deserialization in the plugin, leading to potential arbitrary PHP object ...

CVE-2024-31357

CVE-2024-31357 is a Stored XSS vulnerability in BdThemes Ultimate Store Kit Elementor Addons (and related bundles) affecting versions up to 1.5.2. The issue is documented in multiple connected records (including RH/Red Hat and ENISA context) and Wordfence details confirm the vulnerability exists ...

CVE-2024-31357 WordPress Ultimate Store Kit Elementor Addons plugin <= 1.5.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BdThemes Ultimate Store Kit Elementor Addons allows Stored XSS.This issue affects Ultimate Store Kit Elementor Addons: from n/a through 1.5.2...