jegtheme

Top products

The 15 most recently published vulnerabilities affecting jegtheme.

• CVE-2026-2916Jeg Kit for Elementor <= 3.1.1 - Authenticated (Contributor+) Exposure of Sensitive Information via 'JkitDashboardOption' Inline Script4.3Aug 1, 2026
• CVE-2026-13710Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_body_description' Parameter via 'jkit_image_box' Shortcode/Widget6.4Jul 10, 2026
• CVE-2026-6916Jeg Kit for Elementor <= 3.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'sg_content_number_prefix' Shortcode Attribute6.4May 2, 2026
• CVE-2025-68904WordPress JNews - Frontend Submit plugin <= 11.0.0 - Reflected Cross Site Scripting (XSS) vulnerability7.1Jan 22, 2026
• CVE-2025-68905WordPress JNews - Pay Writer plugin <= 11.0.0 - Local File Inclusion vulnerability7.5Jan 22, 2026
• CVE-2025-68906WordPress JNews - Video plugin <= 11.0.2 - Reflected Cross Site Scripting (XSS) vulnerability7.1Jan 22, 2026
• CVE-2025-14275Jeg Elementor Kit <= 3.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget6.4Jan 8, 2026
• CVE-2025-67591WordPress JNews Paywall plugin < 12.0.1 - Cross Site Request Forgery (CSRF) vulnerability4.3Dec 9, 2025
• CVE-2025-67538WordPress JNews Gallery plugin < 12.0.1 - Cross Site Scripting (XSS) vulnerability6.5Dec 9, 2025
• CVE-2025-53573WordPress Epic Review Plugin <= 1.0.2 - Cross Site Scripting (XSS) Vulnerability7.1Nov 6, 2025
• CVE-2025-39373WordPress JNews Theme <= 11.6.16 - Broken Access Control Vulnerability5.3May 19, 2025
• CVE-2025-2944Jeg Elementor Kit <= 2.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets6.4May 10, 2025
• CVE-2024-13217Jeg Elementor Kit <= 2.6.11 - Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas4.3Feb 27, 2025
• CVE-2024-8899Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template4.3Nov 26, 2024
• CVE-2024-10308Jeg Elementor Kit <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget6.4Nov 26, 2024