Jetwidgets for elementor

This hub aggregates every CVE we track for Jetwidgets for elementor, a product in the web cms plugins space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 9 most recently published vulnerabilities affecting Jetwidgets for elementor.

• CVE-2026-11380JetWidgets For Elementor <= 1.0.21 - Authenticated (Author+) Stored Cross-Site Scripting via Animated Box 'animation_effect' Setting6.4Jul 1, 2026
• CVE-2025-8195JetWidgets For Elementor <= 1.0.20 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Comparison and Subscribe Widgets6.4Dec 13, 2025
• CVE-2024-10323JetWidgets For Elementor <= 1.0.18 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload6.4Nov 12, 2024
• CVE-2024-4626JetWidgets For Elementor <= 1.0.17 - Authenticated (Contributor+) Stored Cross-Site Scripting via layout_type and id Parameters6.4Jun 20, 2024
• CVE-2024-2138JetWidgets For Elementor <= 1.0.15 - Authenticated (Contributor+) Stored Cross-Site Scripting via Animated Box Widget6.4Apr 9, 2024
• CVE-2024-2507JetWidgets For Elementor <= 1.0.16 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Button URL6.4Apr 9, 2024
• CVE-2023-0034JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode5.4Feb 13, 2023
• CVE-2023-0086JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update5.4Jan 5, 2023
• CVE-2021-24268JetWidgets For Elementor < 1.0.9 - Contributor+ Stored XSS5.4May 5, 2021