8.5
High
CVE-2024-33568 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data…
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Deserialization of Untrusted Data vulnerability in BdThemes Element Pack Pro allows Path Traversal, Object Injection.This issue affects Element Pack Pro: from n/a before 7.19.3.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Element Pack Pro 7.19 | earliest → < 7.19.3 | 7.19.3 |
Other CVEs of Element Pack Pro
The 4 CVEs of Element Pack Pro →
CVE-2026-40721
Contributor Local File Inclusion in Element Pack Pro <= 9.0.6 versions
7.5
High
CVE-2025-46258
Missing Authorization vulnerability in BdThemes Element Pack Pro allows Exploiting Incorrectly Configured Access Control…
5.4
Medium
CVE-2025-46257
Cross-Site Request Forgery (CSRF) vulnerability in BdThemes Element Pack Pro allows Cross Site Request Forgery.This…
4.3
Medium