Jegtheme vulnerabilities
33 CVEs and advisories name Jegtheme as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-103907Jeg Kit for Elementor <= 3.2.19 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure via 'jeg_find_author' AJAX Action
- CVE-2026-96328WordPress JNews - Pay Writer plugin <= 12.0.1 - SQL Injection vulnerability
- CVE-2026-100180Jeg Kit for Elementor <= 3.2.19 - Unauthenticated Stored Cross-Site Scripting via Comment
- CVE-2026-18405Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
- CVE-2026-65549WordPress Jeg Elementor Kit plugin <= 3.2.10 - PHP Object Injection vulnerability
- CVE-2026-2916Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script
- CVE-2026-13710Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget
- CVE-2026-6916Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute
- CVE-2025-68906WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-68905WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability
- CVE-2025-68904WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2025-14275Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- CVE-2025-67591WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2025-67538WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability
- CVE-2025-53573WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-39373WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability
- CVE-2025-2944Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets
- CVE-2024-13217Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas
- CVE-2024-10308Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget
- CVE-2024-8899Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template
- CVE-2024-47390WordPress Jeg Elementor Kit plugin <= 2.6.8 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-6804Jeg Elementor Kit <= 2.6.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File
- CVE-2024-4479Jeg Elementor Kit <= 2.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Tabs and JKit - Accordion Widgets
- CVE-2024-3161Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- CVE-2024-3819Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner
- CVE-2024-0334Jeg Elementor Kit <= 2.6.4 - Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes
- CVE-2024-32721WordPress Jeg Elementor Kit plugin <= 2.6.3 - Cross Site Scripting (XSS) vulnerability
- CVE-2024-3162Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial
- CVE-2024-1327Jeg Elementor Kit <= 2.6.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box
- CVE-2024-29101WordPress Jeg Elementor Kit plugin <= 2.6.2 - Cross Site Scripting (XSS) vulnerability