Jetmonsters vulnerabilities
64 CVEs and advisories name Jetmonsters as an affected vendor, newest first. Follow it as a feed.
- CVE-2025-66078WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerability
- CVE-2025-49914WordPress Restaurant Menu by MotoPress plugin <= 2.4.7 - Sensitive Data Exposure vulnerability
- CVE-2025-11991JetFormBuilder <= 3.5.3 - Missing Authorization to Unauthenticated Form Generation
- CVE-2025-8195JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets
- CVE-2025-64384WordPress JetFormBuilder plugin <= 3.5.3 - Broken Access Control vulnerability
- CVE-2025-58252WordPress Getwid Plugin <= 2.1.2 - Sensitive Data Exposure Vulnerability
- CVE-2025-7845Stratum – Elementor Widgets <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Google Maps and Image Hotspot Widgets
- CVE-2025-54038WordPress Restaurant Menu by MotoPress plugin <= 2.4.6 - Cross Site Request Forgery (CSRF) Vulnerability
- CVE-2025-53990WordPress JetFormBuilder plugin <= 3.5.1.2 - PHP Object Injection Vulnerability
- CVE-2025-48258WordPress Mega Menu Block plugin <= 1.0.6 - Cross Site Scripting (XSS) Vulnerability
- CVE-2025-30846WordPress Restaurant Menu by MotoPress plugin <= 2.4.4 - Local File Inclusion vulnerability
- CVE-2024-13642Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget
- CVE-2024-5020Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via FancyBox JavaScript Library
- CVE-2024-10316Stratum – Elementor Widgets <= 1.4.4 - Authenticated (Contributor+) Sensitive Information Exposure via Elementor Templates
- CVE-2024-10872Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2024-10323JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
- CVE-2020-36840Timetable and Event Schedule by MotoPress <= 2.3.8 - Missing Authorization
- CVE-2024-7291JetFormBuilder <= 3.3.4.1 - Authenticated (Administrator+) Privilege Escalation
- CVE-2024-6489Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authorization to Google API key update
- CVE-2024-6491Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update
- CVE-2024-4626JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters
- CVE-2024-5611Stratum – Elementor Widgets <= 1.4.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
- CVE-2024-4413Hotel Booking Lite <= 4.11.1 - Unauthenticated PHP Object Injection
- CVE-2024-3588Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'
- CVE-2024-3342Timetable and Event Schedule by MotoPress <= 2.4.11 - Authenticated (Contributor+) SQL Injection
- CVE-2024-31386Multiple WordPress themes affected by Cross-Site Request Forgery vulnerability
- CVE-2024-2138JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget
- CVE-2024-2507JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL
- CVE-2024-1948Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content
- CVE-2023-6963Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass