jegtheme vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 202413
3. 20256
4. 202612

Newest CVEs

• CVE-2026-103907

  Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action

  jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

  Medium6.5
• CVE-2026-96328

  WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability

  jegtheme · JNews - Pay Writer

  Critical9.3
• CVE-2026-100180

  Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment

  jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

  Medium5.4
• CVE-2026-18405

  Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content

  jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

  High7.2
• CVE-2026-65549

  WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability

  jegtheme · Jeg Kit for Elementor

  High7.2
• CVE-2026-2916

  Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script

  jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

  Medium4.3
• CVE-2026-13710

  Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget

  jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

  Medium6.4
• CVE-2026-6916

  Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute

  jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress

  Medium6.4
• CVE-2025-68906

  WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability

  jegtheme · JNews - Video

  High7.1
• CVE-2025-68905

  WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability

  jegtheme · JNews - Pay Writer

  High7.5