Jegtheme vulnerabilities

Products

• Jeg Kit For Elementor – Powerful Addons For Elementor, Widgets & Templates For Wordpress 21
• Jeg Elementor Kit 16
• Jeg Elementor Kit 3
• Jnews 2
• Jnews - Pay Writer 2

Newest

• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action CVE-2026-103907 6.5 MediumOctober 14, 2026
• jegtheme jnews - pay writer WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability CVE-2026-96328 9.3 CriticalOctober 9, 2026
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment CVE-2026-100180 5.4 MediumOctober 3, 2026
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content CVE-2026-18405 7.2 HighSeptember 18, 2026
• jegtheme jeg kit for elementor WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability CVE-2026-65549 7.2 HighAugust 6, 2026
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script CVE-2026-2916 4.3 MediumAugust 1, 2026
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget CVE-2026-13710 6.4 MediumJuly 10, 2026
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute CVE-2026-6916 6.4 MediumMay 2, 2026
• jegtheme jnews - video WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68906 7.1 HighJanuary 22, 2026
• jegtheme jnews - pay writer WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability CVE-2025-68905 7.5 HighJanuary 22, 2026
• jegtheme jnews - frontend submit WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2025-68904 7.1 HighJanuary 22, 2026
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2025-14275 6.4 MediumJanuary 8, 2026
• jegtheme jnews paywall WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability CVE-2025-67591 4.3 MediumDecember 9, 2025
• jegtheme jnews gallery WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-67538 6.5 MediumDecember 9, 2025
• jegtheme epic review WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability CVE-2025-53573 7.1 HighNovember 6, 2025
• jegtheme jnews WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability CVE-2025-39373 5.3 MediumMay 19, 2025
• jegtheme jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets CVE-2025-2944 6.4 MediumMay 10, 2025
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas CVE-2024-13217 4.3 MediumFebruary 27, 2025
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template CVE-2024-8899 4.3 MediumNovember 26, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget CVE-2024-10308 6.4 MediumNovember 26, 2024
• jegtheme jeg elementor kit WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability CVE-2024-47390 6.5 MediumOctober 5, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File CVE-2024-6804 6.4 MediumAugust 27, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets CVE-2024-4479 6.4 MediumJune 15, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget CVE-2024-3161 6.4 MediumMay 2, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner CVE-2024-3819 6.4 MediumMay 2, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes CVE-2024-0334 6.4 MediumMay 1, 2024
• jegtheme jeg elementor kit WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-32721 6.5 MediumApril 24, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial CVE-2024-3162 6.4 MediumApril 3, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box CVE-2024-1327 6.4 MediumApril 3, 2024
• jegtheme jeg elementor kit WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-29101 6.5 MediumMarch 19, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags CVE-2024-1326 6.4 MediumMarch 12, 2024
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.5.6 - Authorization Bypass CVE-2022-3794 5.4 MediumDecember 22, 2022
• jegtheme jeg elementor kit, jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress +1 more Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass CVE-2022-3805 8.6 HighDecember 22, 2022
• jegtheme jnews JNews < 8.0.6 - Reflected Cross-Site Scripting (XSS) CVE-2021-24342 6.1 MediumJune 7, 2021