Pricing
Case studies
Login
Start trial
Ultimate Store Kit Elementor Addons
bdthemes
Developer
2.9.15
Latest version
4,000
Installations
No date
Last updated
WordPress Plugin
Active VDP
Report vulnerability
Vulnerabilities
Security Policy
Security Contributors
Vulnerability history
0 present
11 patched
4 Mitigation rules
Unauthenticated PHP Object Injection vulnerability
<= 1.6.4
02/02/2026
Broken Access Control vulnerability
<= 2.9.4
30/12/2025
Cross Site Scripting (XSS) vulnerability
<= 2.8.6
22/09/2025
Cross-Site Request Forgery to Limited User Meta Update vulnerability
<= 2.4.1
30/04/2025
Deserialization of untrusted data Vulnerability
<= 2.4.0
17/04/2025
Cross Site Scripting (XSS) vulnerability
<= 2.5.0
04/04/2025
Broken Access Control vulnerability
<= 2.3.0
19/12/2024
Cross Site Scripting (XSS) vulnerability
<= 2.0.5
30/09/2024
Cross Site Scripting (XSS) vulnerability
<= 1.6.4
16/08/2024
PHP Object Injection vulnerability
<= 2.0.3
07/05/2024
Cross Site Scripting (XSS) vulnerability
<= 1.5.2
08/04/2024