Jeg Kit for Elementor
jegtheme
Developer
3.2.18
Latest version
300,000
Installations
No date
Last updated
Vulnerability history
0 present
24 patched
4 Mitigation rules
- Unauthenticated Stored Cross-Site Scripting vulnerability<= 3.2.164 days ago
- Authenticated (Contributor+) Exposure of Sensitive Information vulnerability<= 3.1.131/07/2026
- PHP Object Injection vulnerability<= 3.2.1028/07/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.2.609/07/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability<= 3.1.001/05/2026
- Authenticated (Contributor+) Cross-Site Scripting via Elementor Widget URL Custom Attributes vulnerability<= 2.6.403/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability<= 2.6.402/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonial vulnerability<= 2.6.302/02/2026
- Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget vulnerability<= 3.0.107/01/2026
- Author+ Stored XSS vulnerability< 2.7.024/10/2025
- Authenticated (Contributor+) Stored Cross-Site Scripting via Video Button and Countdown Widgets vulnerability<= 2.6.1209/05/2025
- Authenticated (Contributor+) Sensitive Information Exposure via Countdown and Off-Canvas vulnerability<= 2.6.1127/02/2025
- WordPress Jeg Elementor Kit plugin <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Countdown Widget vulnerability<= 2.6.925/11/2024
- Authenticated (Contributor+) Sensitive Information Exposure via sg_content_template vulnerability<= 2.6.925/11/2024
- Cross Site Scripting (XSS) vulnerability<= 2.6.830/09/2024
- Authenticated (Author+) Stored Cross-Site Scripting via SVG File vulnerability<= 2.6.727/08/2024
- Authenticated Stored Cross-Site Scripting vulnerability<= 2.6.514/06/2024
- WordPress Jeg Elementor Kit plugin <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via JKit - Banner vulnerability<= 2.6.429/04/2024
- Cross Site Scripting (XSS) vulnerability<= 2.6.322/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box andTestimonial vulnerability<= 2.6.303/04/2024
- Authenticated (Contributor+) Stored Cross-Site Scripting via HTML Tags vulnerability<= 2.6.221/03/2024
- Cross Site Scripting (XSS) vulnerability<= 2.6.215/03/2024
- Unauthenticated Settings Update vulnerability< 2.5.703/01/2023
- Subscriber+ Authorization Bypass vulnerability< 2.5.726/12/2022