jegtheme vulnerabilities
33 published CVEs name jegtheme among the affected products.
- 33Published CVEs33 of them scored
- 14Last 12 monthspublished in the last year
- 1Critical7 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-103907
Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
Medium6.5 - CVE-2026-96328
WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
jegtheme · JNews - Pay Writer
Critical9.3 - CVE-2026-100180
Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment
jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
Medium5.4 - CVE-2026-18405
Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
High7.2 - CVE-2026-65549
WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
jegtheme · Jeg Kit for Elementor
High7.2 - CVE-2026-2916
Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script
jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
Medium4.3 - CVE-2026-13710
Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
Medium6.4 - CVE-2026-6916
Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
jegtheme · Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress
Medium6.4 - CVE-2025-68906
WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
jegtheme · JNews - Video
High7.1 - CVE-2025-68905
WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
jegtheme · JNews - Pay Writer
High7.5