Jetelements for elementor
This hub aggregates every CVE we track for Jetelements for elementor, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.
14
CVEs tracked
1
Critical
3
High
0
In CISA KEV
Severity distribution
MEDIUM10HIGH3CRITICAL1
Monthly trend
0
0
0
0
0
0
0
0
2
0
1
2
0
1
0
1
0
1
0
0
0
0
1
0
2024-092026-08
Latest CVEs
The 14 most recently published vulnerabilities affecting Jetelements for elementor.
- CVE-2026-65465WordPress JetElements For Elementor plugin <= 2.9.1.1 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2026-24958WordPress JetElements For Elementor plugin <= 2.7.12.2 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2025-64355WordPress JetElements For Elementor plugin <= 2.7.12 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2025-49939WordPress JetElements For Elementor plugin <= 2.7.8 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2025-53983WordPress JetElements For Elementor <= 2.7.7 - Sensitive Data Exposure Vulnerability6.5
- CVE-2025-55714WordPress JetElements For Elementor Plugin <= 2.7.9 - Cross Site Scripting (XSS) Vulnerability6.5
- CVE-2025-53982WordPress JetElements For Elementor plugin <= 2.7.7 - Cross Site Scripting (XSS) Vulnerability6.5
- CVE-2025-39447WordPress JetElements For Elementor plugin <= 2.7.4.1 - Broken Access Control Vulnerability7.5
- CVE-2025-39448WordPress JetElements For Elementor plugin <= 2.7.4.1 - Cross Site Scripting (XSS) vulnerability6.5
- CVE-2023-48759WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability7.5
- CVE-2023-48760WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability8.2
- CVE-2023-48761WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability6.3
- CVE-2023-39157WordPress JetElements For Elementor Plugin <= 2.6.10 is vulnerable to Remote Code Execution (RCE)9.0
- CVE-2023-48762WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)6.3
Product normalization is registry-driven with AI assist and human review. How it works