Skip to contentJetmonsters vulnerabilities
Newest
- jetmonsters jetwidgets for elementorJetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe WidgetsCVE-2025-81956.4 Medium
- jetmonsters jetformbuilderWordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerabilityCVE-2025-643845.3 Medium
- jetmonsters getwidWordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure VulnerabilityCVE-2025-582524.3 Medium
- jetmonsters stratum widgets for elementorStratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot WidgetsCVE-2025-78456.4 Medium
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) VulnerabilityCVE-2025-540385.4 Medium
- jetmonsters jetformbuilderWordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection VulnerabilityCVE-2025-539907.2 High
- jetmonsters mega menu blockWordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) VulnerabilityCVE-2025-482586.5 Medium
- jetmonsters restaurant menu by motopressWordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerabilityCVE-2025-308468.8 High
- motopress stratum, jetmonsters stratum widgets for elementor +1 moreStratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot WidgetCVE-2024-136426.4 Medium
- 10web form maker by 10web – mobile-friendly drag & drop contact form builder, bqworks accordion slider, colorlibplugins fancybox for wordpress +13 more +15 moreMultiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript LibraryCVE-2024-50206.4 Medium
- jetmonsters stratum widgets for elementorStratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor TemplatesCVE-2024-103164.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-108726.4 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2024-103236.4 Medium
- jetmonsters timetable and event schedule by motopress, motopress timetable and event schedule +1 moreTimetable and Event Schedule by MotoPress <= 2.3.8 - Missing AuthorizationCVE-2020-368407.3 High
- crocoblock jetelements, jetmonsters jetformbuilder — dynamic blocks form builder +1 moreJetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege EscalationCVE-2024-72917.2 High
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key updateCVE-2024-64895.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key updateCVE-2024-64914.3 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id ParametersCVE-2024-46266.4 Medium
- jetmonsters stratum widgets for elementorStratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown WidgetCVE-2024-56116.4 Medium
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.0.8 - Authenticated Privilege Escalation vulnerabilityCVE-2023-378667.2 High
- jetmonsters hotel booking lite, motopress hotel booking +1 moreHotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object InjectionCVE-2024-44139.8 Critical
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'CVE-2024-35886.4 Medium
- jetmonsters timetable and event schedule by motopressTimetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL InjectionCVE-2024-33429.9 Critical
- crocoblock jetformbuilderWordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerabilityCVE-2023-487635.3 Medium
- hidekazu ishikawa lightning, x-t9, jetmonsters emmet lite +12 more +14 moreMultiple WordPress themes affected by Cross-Site Request Forgery vulnerabilityCVE-2024-313864.3 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box WidgetCVE-2024-21386.4 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URLCVE-2024-25076.4 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block ContentCVE-2024-19486.4 Medium
- jetmonsters stratumWordPress Stratum – Elementor Widgets plugin <= 1.3.15 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-299146.5 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.4 - Captcha BypassCVE-2023-69635.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key ModificationCVE-2023-69594.3 Medium
- jetmonsters getwidGetwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to AdminCVE-2023-60427.5 High
- jetmonsters hotel booking liteHotel Booking Lite < 4.8.5 - Unauthenticated Arbitrary File Download & DeletionCVE-2023-59919.8 Critical
- jetmonsters hotel booking liteWordPress Hotel Booking Lite Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-284984.3 Medium
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request ForgeryCVE-2023-18958.5 High
- jetmonsters getwid – gutenberg blocks, motopress getwid +1 moreGetwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpointCVE-2023-19104.3 Medium
- crocoblock jetformbuilder, jetformbuilder — dynamic blocks form builder +1 moreWordPress JetFormBuilder Plugin <= 3.0.6 is vulnerable to Cross Site Request Forgery (CSRF)CVE-2023-332124.3 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via ShortcodeCVE-2023-00345.4 Medium
- crocoblock jetwidgets for elementorJetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings UpdateCVE-2023-00865.4 Medium
- jetmonsters restaurant menu by motopress, motopress restaurant menu +1 moreRestaurant Menu by MotoPress < 2.4.2 - Admin+ Stored Cross Site ScriptingCVE-2021-247224.8 Medium
- crocoblock jetwidgets for elementorJetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSSCVE-2021-242685.4 Medium