VendorsJegthemejeg_elementor_kitall versions
Vulnerabilities

Jegtheme Jeg Elementor Kit

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

16CVEs
CVE-2022-3805
Jeg Elementor Kit <= 2.5.6 - Unauthenticated Authorization Bypass
Published 2022-12-22 · Modified
8.6EPSS 0.016
CVE-2024-32721
WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
Published 2024-04-24 · Modified
6.5EPSS 0.004
CVE-2024-29101
WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-19 · Modified
6.5EPSS 0.004
CVE-2024-47390
WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability
Published 2024-10-05 · Modified
6.5EPSS 0.003
CVE-2024-3819
Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner
Published 2024-05-02 · Modified
6.4EPSS 0.005
CVE-2024-1326
Jeg Elementor Kit <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags
Published 2024-03-12 · Modified
6.4EPSS 0.005
CVE-2024-3161
Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
Published 2024-05-02 · Modified
6.4EPSS 0.004
CVE-2024-4479
Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
Published 2024-06-15 · Modified
6.4EPSS 0.004
CVE-2024-0334
Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes
Published 2024-05-01 · Modified
6.4EPSS 0.004
CVE-2024-6804
Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
Published 2024-08-27 · Analyzed
6.4EPSS 0.004
CVE-2024-1327
Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
Published 2024-04-03 · Modified
6.4EPSS 0.003
CVE-2024-3162
Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
Published 2024-04-03 · Analyzed
6.4EPSS 0.003
CVE-2024-10308
Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
Published 2024-11-26 · Analyzed
6.4EPSS 0.003
CVE-2022-3794
Jeg Elementor Kit <= 2.5.6 - Authorization Bypass
Published 2022-12-22 · Modified
5.4EPSS 0.006
CVE-2024-8899
Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
Published 2024-11-26 · Analyzed
4.3EPSS 0.004
CVE-2024-13217
Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
Published 2025-02-27 · Analyzed
4.3EPSS 0.004